![]() |
try to analyze your target with RDG Packer Detector! it have better result if your target have fake sign!
|
1 Attachment(s)
I also attached 02 file that identified with UPX by PEiD. Please help me.
|
They are both certainly UPX'D, do it manually, open them in ollydbg, and scroll down to the
POPAD JMP ADDRESS they are right at the bottom, just before all the 0's (not the bottom, bottom, but i mean the bottom of the code you see) Break on the JMP ADDRESS, and step into the oep, then dump from here, and rebuild the iat. |
| All times are GMT +8. The time now is 02:48. |
Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2026, vBulletin Solutions, Inc.
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX