Bypassing Crypters

Firstly, we should know what a crypter is?

Crypter is a program that make other programs UnDetectable (UD) orFullyUnDetectable(FUD).UD can be detected only by a few antiviruses and FUD cannot be detected by anyantivirus.

Creating a Trojan(Backdoor)

Now I will firstly create a

SERVER.EXE

file by using

Beast.

How a crypter works?

Every executable file has a signature(binary form) of it from which itcan be detected as a virus file or clean file.There are two methods by which the signature can be changed:-

Using Encryption

This is the automatic method and the user is not concerned with how thesignature changes. It is done by using a software.

Using Hex Editor

This is the manual method and a complex one as the person who has theknowledge of assembly language can change the signature.I will use the automatic method for encryption as it is the easy one and savestime.

Case I:-

Without using Crypter

Firstly I will test the file SERVER.EXE without using crypter(encryption). This can bedone using a Antivirus running on Host machine.The file will be tested by a Antivirus(

Norton

).A

Trojan

(backdoor) is detected by the antivirus.