Exetools  

Go Back   Exetools > General > General Discussion

Notices

 
 
Thread Tools Display Modes
Prev Previous Post   Next Post Next
  #1  
Old 05-19-2004, 04:46
Shub-Nigurrath's Avatar
Shub-Nigurrath Shub-Nigurrath is offline
VIP
 
Join Date: Mar 2004
Location: Obscure Kadath
Posts: 971
Rept. Given: 70
Rept. Rcvd 431 Times in 101 Posts
Thanks Given: 83
Thanks Rcvd at 405 Times in 127 Posts
Shub-Nigurrath Reputation: 400-499 Shub-Nigurrath Reputation: 400-499 Shub-Nigurrath Reputation: 400-499 Shub-Nigurrath Reputation: 400-499 Shub-Nigurrath Reputation: 400-499
Question How to get setup programs' signatures...

Hi all,
I'm starting to have a lot of setup files/installation unpackers actually all of wich are managing a single or some packer(s) type(s) (installshield different versions, Inno, Wise, msi, netinstaller, ...)
Each time I download a program it's always the same story, except for some evident cases I'm not able to recognize which is the used setup packer, so what I do is try all the tools I have, hoping to find one able to manage it.. not a really smart process indeed

I'm now wondering if there's a way or a tool like PEiD for packed programs that recognizes the signatures so as at least to know with which program the setup has been done and to directly user/search the proper unpacker..

Or could it directly be PEiD properly setted up, inserting the signatures in the ini file..afterall it's just a matter of understanding the signature each install builder app leaves inside (strings, informations, byte patterns..)

Could also be an idea for a project to start in case it doesn't exist yet.
__________________
Ŝħůb-Ňìĝùŕřaŧħ ₪)
There are only 10 types of people in the world: Those who understand binary, and those who don't
http://www.accessroot.com
Reply With Quote
 

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
IDA signatures question The Old Pirate General Discussion 5 12-01-2014 04:30


All times are GMT +8. The time now is 02:24.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )