From Collaborative RCE Tool Library

Jump to: navigation, search

IDA Plugin Depack APlib And LZMA

Tool name: IDA Plugin Depack APlib And LZMA
Rating: 0.0 (0 votes)
Author: deroko / ARTeam                        
Current version: 1.0
Last updated: September 23, 2008
Direct D/L link:
License type: Free
Description: A plugin for IDA 5.2 and following, to decompress aplib or lzma packed data in your target when analyzing with IDA.

The plugin supports aPlib which is quite common in malware, but there's also support for packman lzma compression, even if this one is very rare.

Run plugin by pressing CTRL+9 and you will be prompted with a window for unpacking or simply go to Edit->plugins->aplib depack

Full C sources are included, aswell. See the readme.txt for further details and instructions.
Related URLs: No related URLs have been submitted for this tool yet

Screenshot of IDA Plugin Depack APlib And LZMA

RSS feed Feed containing all updates for this tool.

You are welcome to add your own useful notes about this tool, for others to see!

If you find that any information for the tool above is missing, outdated or incorrect, please edit it!
(please also edit it if you think it fits well in some additional category, since this can also be controlled)

Category Navigation Tree
   Code Coverage Tools  (13)
   Code Ripping Tools  (2)
   Helper Tools  (3)
   Hex Editors  (13)
   Memory Patchers  (7)
   Packers  (20)
   Profiler Tools  (11)
   String Finders  (10)
   Tool Hiding Tools  (7)
   Tracers  (22)
   Needs New Category  (3)