convert exe to hexdump with powershell

Question

how i can run this command from cmd without run powershell ?

> [byte[]] $hex = get-content -encoding byte -path C:\temp\nc.exe
> [System.IO.File]::WriteAllLines("C:\temp\hexdump.txt", ([string]$hex))

i try like this but not working

powershell -command " [byte[]] $hex = get-content -encoding byte -path C:\Users\evilcode1\Desktop\nc.exe ; [System.IO.File]::WriteAllLines('C:\Users\evilcode1\hexdump1.txt', ([string]$hex))"

how i can do that ! and then i need to reconstruct the executable from the text file with this command :

[string]$hex = get-content -path C:\Users\user\Desktop\hexdump.txt [Byte[]] $temp = $hex -split ' ' [System.IO.File]::WriteAllBytes("C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\nc.exe", $temp)

how i can run them direct from cmd without open powershell

Are you trying to deploy something evil here? (If not, please share some more about you actual intense) — iRon, Feb 21 '21 at 09:18
Try to use Base64 encoding instead. Hex is possible but not as straightforward. — zett42, Feb 21 '21 at 10:37
Please [format your post properly](https://stackoverflow.com/help/formatting). — mklement0, Feb 21 '21 at 17:45

score 2 · Accepted Answer · answered Feb 21 '21 at 14:26

To convert bytes TO a hex string:

# read the binary data as byte array
[byte[]]$data = [System.IO.File]::ReadAllBytes('D:\Test\blah.exe')

# write to new file as string of hex encoded characters
[System.IO.File]::WriteAllText('D:\Test\blah.hex',[System.BitConverter]::ToString($data).Replace('-',''), [System.Text.Encoding]::ASCII)

To convert back FROM hex string:

# read the textfile as single ASCII string
$hex = [System.IO.File]::ReadAllText('D:\Test\blah.hex', [System.Text.Encoding]::ASCII)

# convert to bytes and write these as new binary file
[System.IO.File]::WriteAllBytes('D:\Test\blahblah.exe', ($hex -split '(.{2})' -ne '' -replace '^', '0X'))

Nice, though there's no strict need for `[System.Text.Encoding]::ASCII`: .NET creates BOM-less UTF-8 files by default, and if such a file contains only ASCII-range characters, as is the case here, it is by definition also an ASCII file. — mklement0, Feb 21 '21 at 17:50

convert exe to hexdump with powershell

1 Answers1