PDA

View Full Version : Help - Unpacking exe Compiled With C++!


Nitx
March 29th, 2010, 11:25
Hello =D
I Need Help To Unpack an Exe.
I scanned with Protect Id and got this message

File Type : 32-Bit Exe (Subsystem : Win GUI / 2), Size : 14527380 (0DDAB94h) Byte(s)
-> File has 12426132 (0BD9B94h) bytes of appended data starting at offset 0201000h
[File Heuristics] -> Flag : 00000000000000000000000000000101 (0x00000005)
[CompilerDetect] -> Visual C/C++
[!] File appears to have no protection or is using an unknown protection
- Scan Took : 0.469 Second(s)

How do I extract it.
Thanks very much!
(sry my english is bad =x)

FrankRizzo
March 29th, 2010, 20:02
IDA

arc_
March 30th, 2010, 02:23
ProtectId clearly says that the program is (probably) not packed, which means there is nothing to unpack.

evaluator
April 6th, 2010, 08:52
arc.. but 12426132 bytes of appended data..

FrankRizzo
April 7th, 2010, 17:35
Sounds like some sorta weird overlay scheme. Or one of those "All in 1" jobbers where they put the exe, and all it's data in the same file, and at runtime it reads the data from itself. Those were very popular for a while.