security worm » software » microsoft security » encryption » execryptor

EXECryptor

Description

Software protection tool. Its purpose is to selectively encrypt fragments of code in the program and add special code for stop debugging and disassembling.
Features include:

- polymorphic encryption with no constant signatures in encrypted fragments;
- encrypted fragment will only be decrypted immediately before its execution; after the execution of the particular fragment it will be encrypted again (at any time during the execution there is only one protected fragment decrypted)
- encryption has unlimited nesting (encrypted block inside encrypted block inside...)
- single-use fragments: it is possible to mark a fragment of code so that fragment will be erased after the very first execution
- user-key encryption
- detect SoftIce, NtIce, FrogIce, TD and other debugger
- detect registry/filesystem/API monitors
- counteraction to dumping application with tools like ProcDump
- anti-tracing measures
- anti-disassembler measures
- direct WinAPI support working around import table.
- full integration with HardKey registration keymanager

EXECryptor can protect any 32bit PE executable files. It was tested under
W95/98/ME/2000/NT/XP. SDK available for Delphi, CBuilder, MSVC.

Security Worm crawls the net for your wireless, server, networking, and internet software. ©2006 All rights reserved.