Exeinfo PE

[MarcElBichon]

Originally Posted by RedMan

Is this is the same ver.0.0.6.3 from July or new sigs added?

There was no v0.0.6.3 in July.
Latest version was uploaded: 18 Sep 2020 16:19:45 UTC.

[Rasmus]

Originally Posted by MarcElBichon

There was no v0.0.6.3 in July.
Latest version was uploaded: 18 Sep 2020 16:19:45 UTC.

The version in this post is 0.0.6.2. The ver 0.0.6.3 is not shared in this forum yet.

[MarcElBichon]

0.0.6.3 final posted author's site!

[Rasmus]

Originally Posted by MarcElBichon

0.0.6.3 final posted author's site!

I know... I said that 0.0.6.3 is not shared in this forum yet.

@user_hidden The one on github is free ver.

[user_hidden]

Originally Posted by Rasmus

I know... I said that 0.0.6.3 is not shared in this forum yet.

@user_hidden The one on github is free ver.

no it's 0.0.6.3 release !

[Rasmus]

Originally Posted by user_hidden

no it's 0.0.6.3 release !

Yes, there are 2 versions: the VIP version for donator and free version on github for everyone. The VIP version of 0.0.6.3 has not been posted here so far.

[user_hidden]

0.0.6.3 direct from dev's github
hxxps://github.com/ExeinfoASL/ASL

[demon_da]

I don't think VIP versions offer more signatures than Free ones, am I right?

[MarcElBichon]

Originally Posted by demon_da

I don't think VIP versions offer more signatures than Free ones, am I right?

Right!

Program name : Exeinfo Pe
Version      : 0.0.6.4 Prev - 2020  ( 1086 + 100 signatures x64 ) 
             : Ext_detector - v5.8.0 ( 580 non exe signatures )
             : external signatures : userdb.txt : 4434

 info : many changes and updates old signatures
        - Ripper work faster 50 %
        - Section GUI - Pre-Scan Button 
        added 
        .js crypted , [ Autoit .a3x script ] , MinGW / C-Free .stabstr sec. 

        FIXED : x64 GO Programming Language

	added : NOT EXE - .dex - Dalvik Executable File ( for Android system v.9.0+ )
        added : NOT Win EXE - .o - ELF  [ 32bit obj. Exe file - CPU : QUALCOMM DSP6 ]
        added version detector :800.NET - dotfuscator - PreEmpire Solutions

        - www Ripper added : "https://" - in unicode

        and more ...

[MarcElBichon]

Upcoming 0.0.6.2!

Latest VIP version [2020-05-17 09:13:22 UTC]:

Program name : Exeinfo Pe
Version      : 0.0.6.1 - 2020  ( 1064 + 86 signatures x64 ) 
             : Ext_detector - v5.6.2 ( 562 non exe signatures )
             : external signatures : userdb.txt : 4426
Author	     : A.S.L Soft
E-Mail       : [email protected]
WWW          : http://www.exeinfo.xn.pl  /   www.exeinfo.o7.pl
[...]

[BAHEK]

Exeinfo Pe 0.0.6.1 II - ( 1079 / 93 - x64 signatures )

[soyandroid]

I have been reversing Sega arcade games, for a while now.

There is an exe packer used a lot on Japanese arcade games, specially on Sega and Konami, RingEdge, Nu and ALLS games, called CrackProof from Httpec.

The company manufacturing it is that one:

https://www.hypertech.co.jp/en/

I'm wondering if will be posible to add support for Exeinfo Pe for detect exes protected with CrackProof.

[DARKER]

Originally Posted by soyandroid

I'm wondering if will be posible to add support for Exeinfo Pe for detect exes protected with CrackProof.

You can do it by your self by adding signature to userdb.txt file and then ask author to add it officialy

[soyandroid]

Thanks Darker,
I will check the database file and the format of the signatures.

[DARKER]

In past there was plugin EPScan for PEiD (should be compatible with Exeinfo), that can simplify your work:

https://mark0.net/plugins-peid-epscan-e.html

EPScan add the ability to scan a serie of executable files and detect common patterns in the firsts 128 bytes of code at program entry point. This way, the process to create a new signature for a specific type of EXEs is greatly simplified. Running the plugin will trigger the scanning of all EXE files in the same folder of the currently selected one. In an instant a dialog box will show the extracted common bytes. As the format used is the same of PEiD's USERDB.TXT external signature file, it take just some cut & paste to quickly add the brand new signature.

or

Signature Maker for 32 and 64 bit exe files

You can create your sign. for Advanced Scan plugin ( userdb.txt )

http://exeinfo.orgfree.com/plugins/ASL_SignMaker64_v01.zip