From Collaborative RCE Tool Library
IDA Plugin Depack APlib And LZMA
| Tool name: | IDA Plugin Depack APlib And LZMA |
|
||
|---|---|---|---|---|
| Author: | deroko / ARTeam | |||
| Website: | http://arteam.accessroot.com | |||
| Current version: | 1.0 | |||
| Last updated: | September 23, 2008 | |||
| Direct D/L link: | http://arteam.accessroot.com/releases.html?fid=45 | |||
| License type: | Free | |||
| Description: | A plugin for IDA 5.2 and following, to decompress aplib or lzma packed data in your target when analyzing with IDA. The plugin supports aPlib which is quite common in malware, but there's also support for packman lzma compression, even if this one is very rare. Run plugin by pressing CTRL+9 and you will be prompted with a window for unpacking or simply go to Edit->plugins->aplib depack Full C sources are included, aswell. See the readme.txt for further details and instructions. |
|||
| Related URLs: | No related URLs have been submitted for this tool yet | |||
| Screenshot: |
|---|
 |
Feed containing all updates for this tool.
(please also edit it if you think it fits well in some additional category, since this can also be controlled)
You are welcome to add your own useful notes about this tool, for others to see!