Hacker News new | past | comments | ask | show | jobs | submit login

it's not a PE, it's a (headerless) COM.

PE, ELF, and Mach-O all enforce a different signature at offset 0. Thus it's impossible to combine them - otherwise, I'd have done it already ;)




Getting around the offset 0 is always the hardest part in all hybrid format hacks.

I tried .vbs+.bat hybrid and .bat+.com hybrid.


COM doesn't have the MZ magic number.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: