Today I will show how to understand binded/virused programs (very basic)
dnSpy (ILSpy,dotPeek etc.)
- Choose a binded/virused program and open the dnSpy (I’m use SQLi Dumper)
2)Save exe to visual studio project file
3)And open the project file location and open resources.resources in EmEditor Hex View
Bingo! this is resource file this is includes .text .rsrc
This is binded/virused program.
Source: Unknown provided by outsider!