TinyLoad v7.1
Tinyload v7.1
- XXTEA overlay encryption: payload encryption upgraded from XOR to XXTEA (Corrected Block TEA).
- dual thread key recombination: 128 bit XXTEA key split across two threads. Full key only exists transiently inside a WaitForSingleObject fence, then destroyed.
- Tail field randomisation: overlay Tail serialized in Fisher Yates randomized order per build.
- Anti debug improvements: PEB BeingDebugged and NtGlobalFlag checks before Win32 APIs. Catches debuggers that patch IsDebuggerPresent.
- PE compatibility: 32-bit/unknown machine rejection, section bounds overflow guards, import validation against SizeOfImage.
Graph:
