Question

I have embedded an EXE as a resource in my Win32 application.

I’m looking to the registry for a certain value. If the value is there and correct, then i copy the embedded EXE to the local file system an execute it from there.

I don’t want it to be extracted from my EXE.

Should i do anything to prevent this, or is it impossible already?

Thanks.

Answer 1

but you could inbed the exe as an .obj or an static array rather than as a resource. That would make it harder for an attacker to find in your code, but still not impossible.

You can use the unix objcopy tool to convert your exe into a .obj file and then link to that in your c code. someone would have to decompile your code in order to find the .exe, which is quite a bit harder than using a resource extractor.

Embed data in a C++ program