Skip to content

TinyLoad v7.1

Choose a tag to compare

@iamsopotatoe-coder iamsopotatoe-coder released this 16 Jun 14:20
ec20dc1

Tinyload v7.1

  • XXTEA overlay encryption: payload encryption upgraded from XOR to XXTEA (Corrected Block TEA).
  • dual thread key recombination: 128 bit XXTEA key split across two threads. Full key only exists transiently inside a WaitForSingleObject fence, then destroyed.
  • Tail field randomisation: overlay Tail serialized in Fisher Yates randomized order per build.
  • Anti debug improvements: PEB BeingDebugged and NtGlobalFlag checks before Win32 APIs. Catches debuggers that patch IsDebuggerPresent.
  • PE compatibility: 32-bit/unknown machine rejection, section bounds overflow guards, import validation against SizeOfImage.

Graph:

compression_graph