How to get setup programs' signatures...

[Shub-Nigurrath]

Hi all,
I'm starting to have a lot of setup files/installation unpackers actually all of wich are managing a single or some packer(s) type(s) (installshield different versions, Inno, Wise, msi, netinstaller, ...)
Each time I download a program it's always the same story, except for some evident cases I'm not able to recognize which is the used setup packer, so what I do is try all the tools I have, hoping to find one able to manage it.. not a really smart process indeed

I'm now wondering if there's a way or a tool like PEiD for packed programs that recognizes the signatures so as at least to know with which program the setup has been done and to directly user/search the proper unpacker..

Or could it directly be PEiD properly setted up, inserting the signatures in the ini file..afterall it's just a matter of understanding the signature each install builder app leaves inside (strings, informations, byte patterns..)

Could also be an idea for a project to start in case it doesn't exist yet.

Hi there!
Try GT2 from
hxxp://philip.helger.com/gt/
It detects PE signatures and archive contents etc.
Current version is 0.33; 0.34 is coming soon.
regards
PHaX

[Shub-Nigurrath]

Hi,
extremely interesting tool! I didn't know! Post here whenever the new version will be out!! You'll make the day of much ppl.

[TQN]

Hi phax !
Do you have a plan to develop a GUI for GT. As I remember, the GTUI is old. Are you code in VS .NET 2003. Think about the WTL for GUI creating.
Regards.

Yep, I plan to. But since I have very different output types, I still don't know how to build a fast, small, easy-to-use GUI without spending more than 1 month for the initial version. I'm working on a small XML based GUI but that takes some time....
But you can consider it a promise that a new GUI will arrive.
Question: are you willing to have a 800K GUI for an 250K application? For me it sounds like overkill.

[TQN]

With WTL, I think the GUI with same abilities as old GTUI will only 100-200 KB in size. It will not uses MSVCRT, MFCxxx DLL. The XML GUI, which I saw in RTA, is a good idea, but the code for XML library will large, or depend on MSXML
Regards