[Delphi]Morphine KOL - Polymorphic Crypter

[olegteror]

This is Morphine, a polymorphic crypter originally coded by Holy_Father and the Hacker Defender Team.

This private release of Morphine has been modded by an unknown author for a graphical user interface; also undetection attempts have been made and the source restructured for easier reading.

File Info

Report date: 2010-05-17 09:34:16 (GMT 1)
File name: Incest.exe
File size: 464896 bytes
MD5 Hash: 8273790334aa420777925ba862f76c59
SHA1 Hash: 8ffc89b79bca3534c9e16b86af0fcdf34bb95d17
Detection rate: 9 on 20 (45%)
Status: INFECTED

Detections

a-squared - Trojan-Dropper.Win32.Calimocho!IK
Avast - -
AVG - Win32/Heur
Avira AntiVir - HEUR/Crypted
BitDefender - Gen:Packer.Morphine.Cqagau@9zNji
ClamAV - Trojan.Packed-86
Comodo - -
Dr.Web - -
F-PROT6 - W32/Heuristic-210!Eldorado
G-Data - -
Ikarus T3 - Trojan-Dropper.Win32.Calimocho
Kaspersky - SuspiciousPacker.Multi.Generic
McAfee - New Malware.h
NOD32 - -
Panda - -
Solo - -
TrendMicro - -
VBA32 - -
VirusBuster - -
Zoner - -

Scan report generated by
NoVirusThanks.org

Original public Morphine would have consistent Morphine tagged detections and would be 100% detected.

I release this private code for you to learn from the source.

Knowledge should be free.

This Morphine is very thorough in rebuilding the PE, as you can see here, it successfully crypts a Delphi VCL project.


Binaries are included in the archive.
You must have installed KOL units to compile.
You can find them: [Ссылки доступны только зарегистрированным пользователям . Регистрируйся тут...]


Download:
[Ссылки доступны только зарегистрированным пользователям . Регистрируйся тут...]

[master008]

Криптор довольно таки не плохой, не то что обычное г-о на вб через инжект. Если б автор приделал ещё там вызов фейковых api и циклов то тогда б я думаю до сих пор был бы беспалевный(ну конечно если б антиэмуль не спалили)