向PE文件中插入代码技术的研究

PE文件格式是Windows操作系统引入的可执行文件格式。论文介绍windows平台下PE文件的基本结构。重点阐述了在不重编译源码的前提下实现代码插入技术所涉及的基本任务:把代码插入到PE文件中可用的空闲空间或者在文件尾部添加一个新的节来插入代码;如何用一般方法钩住程序的控制和和重定位插入代码;插入代码如何获取对其有用的windowsAPI函数的地址。向PE文件插入外部代码技术的研究是很有价值的,它对反PE型病毒和软件加壳技术的研究都很有用。

Research on Injecting your Code to a PE File

Portable Executable File Format is a kind of executable file formats of windows operation system.Portable executable file format is introduced in this article,and base tasks to inject your code in a PE file without recompiling source code are demonstrated: Injecting your code to PE file's redundant space or adding a new section at the file's tail to save your code; How to get control of program generally and Relocation of the code; How to get some necessary windows API entrance address.Code injecting is very useful work,it benefits anti-PE virus and software packing technology.