Research of PE File Information Hiding Based on Incremental Link
基于增量链接的PE文件信息隐藏技术研究

Adopting incremental link aims to boost compile speed and make debug convenient.By analyzing PE file chararcteristics after utilizing incremental link, this algorithm was designed. Concretely,it hides information into padding bytes between adjacent function codes,which integrates hidden information into program instruction codes to guarantee concealment and attack tolerance. The experiment results show that the algorithm has a large hiding capacity, and PE file size does not increase after hidden,and there is not any impact on program performance.