Exetools  

Go Back   Exetools > General > General Discussion

Notices

 
 
Thread Tools Display Modes
Prev Previous Post   Next Post Next
  #5  
Old 01-13-2005, 16:16
spokey
 
Posts: n/a
That was indeed the same question as i did ask a few days ago, but like Crudd already said, it aint that easy to just remove the section name with a PE editor because most packers/protecters do use crc check in the protected files, so when you remove the section name you also have to fix the crc.

Some protectors offer you the option to give their section a blank or another name, but most signature detecting tools dont look to the section name but to an internal signature or code patterns. (if i did understand it right)
Reply With Quote
 


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
ASPR 2.xx OEP hiding bug KaGra General Discussion 1 08-27-2005 19:52
hiding stuff SLIM SLIM General Discussion 4 01-26-2003 21:04


All times are GMT +8. The time now is 05:57.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )