From cf527aca972404766ac52ac2a14dec923a04e272 Mon Sep 17 00:00:00 2001
From: Dobin <dobin.rutishauser@gmail.com>
Date: Sat, 3 Feb 2024 18:40:43 +0000
Subject: [PATCH] feature: verify infeceted exe

---
 helper.py    | 25 ++++++++++++++++++++-----
 supermega.py |  8 +++++---
 2 files changed, 25 insertions(+), 8 deletions(-)

diff --git a/helper.py b/helper.py
index 6d92553..e8f0e90 100644
--- a/helper.py
+++ b/helper.py
@@ -98,11 +98,11 @@ def make_shc_from_asm(asm_clean_file, exe_file, shc_file):
     else:
         print("    > Generated {}".format(exe_file))
 
-    print("--[ Get code section from exe ]")
+    print("---[ Get code section from exe ]")
     code = get_code_section(exe_file)
     with open(shc_file, 'wb') as f:
         f.write(code)
-    print("--[ Shellcode written to: {}  (size: {}) ]".format(exe_file, len(code)))
+    print("---[ Shellcode from {} written to: {}  (size: {}) ]".format(exe_file, shc_file, len(code)))
 
 
 def get_code_section(pe_file):
@@ -183,16 +183,16 @@ def verify_shellcode(shc_name):
     ], stdout=subprocess.DEVNULL, stderr=subprocess.DEVNULL)  # , check=True
     time.sleep(SHC_VERIFY_SLEEP)
     if os.path.isfile(verify_filename):
-        print("---> OK. Shellcode payload verified (file was created)")
+        print("---> Verify OK. Shellcode payload verified (file was created)")
         # better to remove it immediately. If cleanup on start is not performed, 
         # there may be false positives
         os.remove(verify_filename)
     else:
-        print("---> FAIL. Payload did not create file.")
+        print("---> Verify FAIL. Payload did not create file.")
 
 
 def inject_exe(shc_file, exe_in, exe_out):
-    print("--[ Injecting: shc {} into: {} -> {} ]".format(
+    print("--[ Injecting: {} into: {} -> {} ]".format(
         shc_file, exe_in, exe_out
     ))
     shutil.copyfile(exe_in, exe_out)
@@ -206,3 +206,18 @@ def inject_exe(shc_file, exe_in, exe_out):
         exe_out
     ], check=True,  stdout=subprocess.DEVNULL, stderr=subprocess.DEVNULL)
 
+
+def verify_injected_exe(exefile):
+    print("---[ Verify infected exe: {} ]".format(exefile))
+    subprocess.run([
+        exefile,
+    ], stdout=subprocess.DEVNULL, stderr=subprocess.DEVNULL)  # , check=True
+    time.sleep(SHC_VERIFY_SLEEP)
+    if os.path.isfile(verify_filename):
+        print("---> Verify OK. Infected exe verified (file was created)")
+        # better to remove it immediately. If cleanup on start is not performed, 
+        # there may be false positives
+        os.remove(verify_filename)
+    else:
+        print("---> Verify FAIL. Infected exe did not create file.")
+
diff --git a/supermega.py b/supermega.py
index 2b77d5b..74696fe 100644
--- a/supermega.py
+++ b/supermega.py
@@ -98,14 +98,14 @@ def main():
         with open(options["payload"], 'rb') as input2:
             data_payload = input2.read()
 
-        print("--[ Stager: {}  Shellcode: {}  (both: {})]".format(
+        print("--[ Integrate Stager: {}  Payload: {}  (sum: {})]".format(
             len(data_stager), len(data_payload), len(data_stager)+len(data_payload)))
 
         with open("main-clean-append.bin", 'wb') as output:
             output.write(data_stager)
             output.write(data_payload)
 
-        print("--[ Final shellcode available at: {} ]".format("main-clean-append.bin"))
+        print("---[ Final shellcode available at: {} ]".format("main-clean-append.bin"))
 
         if options["verify"]:
             print("--[ Verify final shellcode ]")
@@ -117,7 +117,9 @@ def main():
 
     if options["inject_exe"]:
         inject_exe("main-clean-append.bin", options["inject_exe_in"], options["inject_exe_out"])
-        
+        if options["verify"]:
+            print("--[ Verify final exe ]")
+            verify_injected_exe(options["inject_exe_out"])
 
 if __name__ == "__main__":
     main()
\ No newline at end of file