A simple PE Loader tool that loads a PE from memory, decrypt it, resolve its imports, relocate its sections, and redefine its entry point to execute seamlessly from memory.
- In-memory decryption: Decrypts and loads PE files directly from memory.
- Imports resolution: Dynamically resolves imports even for complex executables.
- Section relocation: Updates section locations based on adjusted memory offsets.
- Flexible entry point redirection: Executes the PE with its redefined entry point.
⚠️ Disclaimer:
This tool is strictly for educational and research purposes. Misuse of this tool for malicious or unauthorized activities is strictly prohibited. Respect the laws and ethical guidelines of your jurisdiction.
Make sure you have the following installed:
Windowsoperating system (recommended for PE file handling).Visual StudioorGCCfor compiling the project.C/C++compiler for maximum performance.
git clone https://github.com/ProcessusT/LoadThatPE.git
cd LoadThatPE