[STRELiTZIA]

Hello,

Please, try to run these both attached samples, for those who have Windows 7 SP1 real machine.

I coded and modified these two samples for my own tests...

01- poc.exe: displays window GUI.
02- iMessageBox.exe: displays message box.

My tests result:
1- On Windows Xp Sp3 Real machine: samples run.
2- On Windows 7 Sp0 Virtual machine: samples run.
3- On Windows 8 Developer preview Virtual machine: samples run.

Regards.

[EP_X0FF]

None of them display anything. Win7 sp1 x64.

Size of header = 1b0, no sections - nothing to load.

[STRELiTZIA]

Thanks Ep,
How about Win 7 X86? it works for me (Win7 x86 Real machine) and yes it doesn't work under Win7 X64...

[EP_X0FF]

Windows loader base algorithms works slightly different in x64 versions of Windows. In x86 it will run. Maybe we should move this discussion into public forums? There is nothing really private in tiny PE. http://www.phreedom.org/research/tinype/

[STRELiTZIA]

Maybe we should move this discussion into public forums?

Ok :D