tylous / freeze Goto Github PK

im getting this weird error everytime i try to run freeze no matter what mode exe/dll encrypted/notencrypted im have 0 experience with go and thats i cannot debug it myself 😅

exit status 1: # runtime
panic: runtime listed a std package we can't find: arena

goroutine 1 [running]:
main.listPackage({0xc00001c9dd, 0x5})
	/root/go/pkg/mod/mvdan.cc/[email protected]/shared.go:389 +0x734
main.(*transformer).handleDirectives(0x7fffa6f82948?, {0xc000047c00, 0x69, 0x2647?})
	/root/go/pkg/mod/mvdan.cc/[email protected]/main.go:952 +0x2e5
main.transformCompile({0xc000014ad0?, 0x171b?, 0xa3?})
	/root/go/pkg/mod/mvdan.cc/[email protected]/main.go:839 +0x75b
main.mainErr({0xc000014ab0, 0x9d, 0xa5})
	/root/go/pkg/mod/mvdan.cc/[email protected]/main.go:424 +0x855
main.main1()
	/root/go/pkg/mod/mvdan.cc/[email protected]/main.go:228 +0x177
main.main()
	/root/go/pkg/mod/mvdan.cc/[email protected]/main.go:135 +0x13
exit status 1

I try this below commands:
./Freeze -I a.exe -encrypt -sandbox -O bypassTest.exe
./Freeze -I a.exe -O bypassTest7.exe -encrypt -process "C:\\Windows\\System32\\notepad.exe"
./Freeze -I a.exe -encrypt -process C:\Windows\System32\notepad.exe -sandbox -O bypassTest2.exe
./Freeze -I a.exe -O bypassTest3.exe -process MsMpEng.exe -sandbox
./Freeze -I a.exe -encrypt -sandbox -O bypassTest4.exe
./Freeze -I a.exe -encrypt -sandbox -O bypassTest5.exe
./Freeze -I a.exe -encrypt -process C:\Windows\Temp\ -sandbox -O bypassTest6.exe

After i test to vmware wind10 , and also a wind10 , does not run

[!] Missing Garble... Downloading it now
exec: no command:
[!] Selected Process to Suspend: notepad.exe
[+] Loader Compiled
[*] Compiling Payload
exec: no command:
[+] Payload miansha.exe Compiled

May I know how to run it

I was wondering if the tool supports multiple export flags or if you can use a def file?

I have a working PoC for dll hijacking and that method uses a .def file to ensure the dll can proxy. Using freeze with the same approach is not working and I'm wondering if -export "function1" -export "function2" ..... -export "function48" is supported? The tool appears to accept multiple flags but there is no feedback, in the code it also looks like it supports it, but for some reason it isnt working the same as my PoC that uses a def file? Is there a way to use a def file with your tool?