|
Having similar problem
I am facing a similar problem...
Unpacking a vboxed exe file is easy and rather similar for any vboxed exe file.
But the unpacking of vboxed dll files is needing a lot of time and analysis...Is there any simpler way like what we do for exe files...For example...
bp FreeLibrary when the try dialog screen comes up...Followed by putting a bp on the CODE segment once it breaks and then running it etc leads you straight to the OEP....is there any simpler way to do so for the dll files also...?
the way I proceed is mostly by changing the characteristics of the dll file by subtracting 2000 from it and then opening it under olly as an executable file...
But this method is also mostly not so helpful, and finally I end up analyzing it with IDA before I get anything useful done...
I'd already researched on secveral sites using google and also on the RCE site but there is no easy or methodical way to unpack the dll files...
Any pointers on this ... ?
|