Exetools  

Go Back   Exetools > General > General Discussion

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 08-29-2004, 21:18
Spiyre
 
Posts: n/a
Smile Exe Encrypter/Packer

This is my first post to the forum..

Anyway I was wondering if any people here could help me understand how exe packers and crypters work. I get the basics of it that a packed exe
includes a loader stub & then exe data; the unpacking process is what
I don't understand, is the program unpacked to disk and run like that or is it
launched from memory (how?) also when a file is being packed is anything removed (Like the header).

Thanks for the help.
Reply With Quote
  #2  
Old 08-29-2004, 22:16
dj-siba's Avatar
dj-siba dj-siba is offline
Musician Member
 
Join Date: Jun 2003
Location: Outside the dot
Posts: 324
Rept. Given: 34
Rept. Rcvd 43 Times in 21 Posts
Thanks Given: 57
Thanks Rcvd at 160 Times in 43 Posts
dj-siba Reputation: 42
is the program unpacked to disk and run like...

No, it's unpacked to memory...

for more info read this:

hxxp://dasomnetwork.com/~leedw/pub/writing_your_own_packer.html

Regards
Reply With Quote
  #3  
Old 08-30-2004, 00:58
iamritu
 
Posts: n/a
exe packers

Packers basically serves two pupose
1. Reduce the file size
2. Make the code uninteligible to disassemblers and as such dissude prospective reverser from reversing programmes. This is further extended by use f anti-debuggng tricks
packers when run in right environment like no debuggers serves its pupose by first unpacking or decrypting the code it has crypted/packed and run the exe
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
sys packer emptyHook General Discussion 6 07-24-2012 19:46
First .NET packer? SystemeD General Discussion 16 06-05-2005 15:15
What packer would you use Fade General Discussion 35 04-03-2004 12:01


All times are GMT +8. The time now is 00:21.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )