How to add a password to a .exe file?

NTDEV
1

hello,
i want to add a password to a .exe file,if added success,the run the
.exe file will popup a dialog and ask the password,if pass then run the
true .exe file,or tell the password wrong.
i do not know how to start,does some can tell me how to it?
best regards
ding hao

Ãâ·ÑÏÂÔØ MSN Explorer: http://explorer.msn.com/lccn/

2

shark marian wrote:

i want to add a password to a .exe file,if added success,the run the
.exe file will popup a dialog and ask the password,if pass then run the
true .exe file,or tell the password wrong.
i do not know how to start,does some can tell me how to it?

What do you hope to accomplish with such a system? It seems like
you’re trying to secure access to the “true” exe, no? If that’s the
case, then there are at least a couple of problems. The first problem
is that the “true” exe image must be stored somewhere from where it
may be loaded and executed. What prevents a user from just running
the “true” exe? OK, suppose that the “true” exe image is indeed
secure. The second problem you have is password storage. Where is
the correct password stored? If the answer is that it is stored in
the image, then that is a very simple thing to reverse engineer. You
could somewhat raise the security bar by resorting to
DPAPI(CryptProtectData/CryptUnprotectData), but if you read the docs
for those APIs, you’ll expose at least two new problems. Even if you
stored a hash instead of a plain password, it would still most likely
only take twiddling 1 bit of your binary with the use of a hex editor
to defeat your password check anyway.

All this is an attempt to discourage you from pursuing this method.
I would recommend simply setting the appropriate ACL on the “true” exe
image to begin with.

Perhaps I’m misunderstanding your problem.

–
Steve Johnson

3

And what are you going to do if there is no desktop? n desktops? the
application is run remotely? This does nothing to improve security but it
sure does mess up operation for many configurations.

Windows has this already, change the ACL of an executable to only allow
access by a “special user” you create for that application. Then you are
forced to “run as” to get access.

–
Don Burn (MVP, Windows DDK)
Windows 2k/XP/2k3 Filesystem and Driver Consulting
Remove StopSpam from the email to reply

“shark marian” wrote in message
news:xxxxx@ntdev…
> hello,
> i want to add a password to a .exe file,if added success,the run the
> .exe file will popup a dialog and ask the password,if pass then run the
> true .exe file,or tell the password wrong.
> i do not know how to start,does some can tell me how to it?
> best regards
> ding hao
>
> _________________________________________________________________
> Ãâ·ÑÏÂÔØ MSN Explorer: http://explorer.msn.com/lccn/
>
>

4

Hi!

Download this program… they insert a password inside .exe file…

http://www.velasco.com.br/pepp-installer.zip

Best regards,

Marcos

----- Original Message -----
From: “shark marian”
To: “Windows System Software Devs Interest List”
Sent: Sunday, January 30, 2005 8:31 AM
Subject: [ntdev] How to add a password to a .exe file?

> hello,
> i want to add a password to a .exe file,if added success,the run the
> .exe file will popup a dialog and ask the password,if pass then run the
> true .exe file,or tell the password wrong.
> i do not know how to start,does some can tell me how to it?
> best regards
> ding hao
>
> _________________________________________________________________
> Ãâ·ÑÏÂÔØ MSN Explorer: http://explorer.msn.com/lccn/
>
> —
> Questions? First check the Kernel Driver FAQ at
> http://www.osronline.com/article.cfm?id=256
>
> You are currently subscribed to ntdev as: xxxxx@uol.com.br
> To unsubscribe send a blank email to xxxxx@lists.osr.com

5

thanks, i mean to add a password to the exe file,and stored in the exe
file and encrypted,do not need to modify the password,this is maybe insert
the code to the pe file?
best regards
ding hao

ÓëÁª»úµÄÅóÓѽøÐн»Á÷£¬ÇëʹÓà MSN Messenger: http://messenger.msn.com/cn

6

Protect it with a proper ACL. Possibly encrypt it with EFS. 2 trivial ways.

Maxim Shatskih, Windows DDK MVP
StorageCraft Corporation
xxxxx@storagecraft.com
http://www.storagecraft.com

----- Original Message -----
From: “shark marian”
To: “Windows System Software Devs Interest List”
Sent: Sunday, January 30, 2005 2:31 PM
Subject: [ntdev] How to add a password to a .exe file?

> hello,
> i want to add a password to a .exe file,if added success,the run the
> .exe file will popup a dialog and ask the password,if pass then run the
> true .exe file,or tell the password wrong.
> i do not know how to start,does some can tell me how to it?
> best regards
> ding hao
>
> _________________________________________________________________
> Ãâ·ÑÏÂÔØ MSN Explorer: http://explorer.msn.com/lccn/
>
>
> —
> Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256
>
> You are currently subscribed to ntdev as: xxxxx@storagecraft.com
> To unsubscribe send a blank email to xxxxx@lists.osr.com