puzzCode: build uncrackable windows application against analysis tools

by do son · March 22, 2018

puzzCode(Puzzle Code)

puzzCode is a simple compiler based on mingw, written in C# to build windows applications in such a way that they can’t be analyzed by standard analysis tools (e.g. IDA, Ollydbg, x64dbg, Snowman Decompiler, etc.)

It is based on MinGW to compile C/C++ source code to assembly language while also obfuscating every instruction. It transforms each original instruction into obfuscated code by breaking each function into countless pieces.

The most important thing is that the executable (exe) file, once compiled by puzzCode will be undetectable by antivirus as it effectively will create a completely new application.

Normal Graph Overview (IDA)

It’s pretty easy to understand, right?

Graph Overview, Compiled via puzzCode (IDA)

… How about now? 🙂

x64dbg (32bit Mode)

Snowman Plug-in

Download

puzzCode only support 32bit Windows PE compiling currently.

Install MinGW on your windows environment: https://sourceforge.net/projects/mingw/files/Installer
Download from Release Page, or clone this project, compile it with Visual C# 2017, you’ll get puzzCode software.

Usage

You have to set the MinGW path on your Windows environment the first time you run puzzCode and enter compiler arguments, linker arguments, and obfuscated degree (from 0 to 100).

After you set up the configuration, you are able to freely code in puzzCode. Simply hit the “Compile” button and the .exe file will be generated at the same path of your source code file.