How the hex code of an application is edited?
Someone told me that ,by changing the hex code of an application we can make that application undetected from antiviruses.
So please help me to findout how it is done.
If you edit the application in a hex editor you will most likely damage the software and make it unable to run. Most antivirus software have a list where specified applications can be omitted out ( exceptions) and it will not detect them or report a virus infection.
You've gotta find out which part of a file is being detected by the AV's signature database,
and hex edit that part of the file. You'll probably want a file splitter for this.
Simply changing something in the code will never help you. First understand how it works and how it will work if you change the code. Antiviruses use heuristic detection, which will most probably detect the code as mallicious. Good luck!!
The Code is the answer ... but who made the question...
so maybe decompiling is helping you out. But you have to be professional to get the clues into the right frame. Problem is: everybody is understanding languages, but not many are understanding the code...
