XyrisPack is a small proof-of-concept packer written in MASM
WaterEffect: https://github.com/Xyl2k/MASM32-graphical-effects
┌─────────────────────────────────┐
│ Builder Process │
├─────────────────────────────────┤
│ 1. Takes original payload │
│ 2. Generates random section │
│ 3. Creates random XOR key │
│ 4. Encrypts payload │
│ 5. Adds new section to stub │
└─────────────────────────────────┘
┌─────────────────────────────────┐
│ Stub Execution Flow │
├─────────────────────────────────┤
│ 1. Unhooks NTDLL │
│ 2. Locates encrypted section │
│ 3. Decrypts payload │
│ 4. Performs process hollowing │
└─────────────────────────────────┘