pe_to_shellcode icon indicating copy to clipboard operation
pe_to_shellcode copied to clipboard

Request help, thanks

Open sleahootqsqnl opened this issue 2 years ago • 2 comments

C:\Users\Administrator\Desktop>pe2shc.exe sasa.exe Using: Loader v2 Reading module from: sasa.exe [ERROR] The PE must have relocations! [ERROR] Not supported input file!

4DMH(I)VML9YE)IA_E2DA6B

sleahootqsqnl avatar Mar 30 '23 16:03 sleahootqsqnl

Hi @sleahootqsqnl ! As the message says, your PE file has no relocations - so in other words it is not a good material for shellcodification. If a PE has no relocations table, it can be loaded only at a fixed address, and you won't be able to inject it freely at any arbitrary address. Such attempt will cause a crash. Relocation table cannot be added post-compilation - so if it is not there, it can't be helped. That's why such files are not supported.

Try with some other executable, which do have relocations.

hasherezade avatar Mar 31 '23 18:03 hasherezade

how to use vs2015 compie with relocations

hsxfddos avatar May 05 '23 08:05 hsxfddos