Results 1 to 3 of 3

Thread: Help with manual unpacking!!

  1. #1
    NeO
    Guest

    Help with manual unpacking!!

    For Kayaker or evenone with ideas!

    So i have one another Pecryp 1.02 the problem is not normal !If you opened it with Peedit you get .ficken in every section!In normal Pecrpy it's only in the last one!So i you use PeCrpy unapcker it opens it and at the he gets an eRROR!SO i have to unpack it manually!

    [imagebase] 400000 ,OEP is 401000 , after /tracex command i used /pedump 400000 1000 D:\kl.exe!
    And he says 400000 is not original Pehead!
    Where should i find it???
    If i use /dump 400000 1000 D:\kl.exe! it dumps it but the problem is that there is no Pehead so no MZ!!

    You can convert a /DUMP [imagebase] [length of file] to a working PE as well afterwards using Procdump, PEditor or some other util. Assuming of course the packer hasn't pulled some other trick such as corrupting the Import table or the PE Header
    Kayaker did you mean you the bhrama server!If i use bhrama server on Pecrpty 1.02 I get shut down off Loader!!

    Thanks for helpinG!!

    NeO
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  2. #2
    The Owl
    Guest
    i suggest you take a look at the '/option p' part of the docs, especially the PE
    header reload options. also, it's generally a good idea to take a look at the
    in-memory PE header before attempting a /pedump, there are several values
    there that must be valid (PE signature, num of sections, imagesize, section table,
    object dir at least).
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  3. #3
    NeO
    Guest
    The Owl do you know any tut with the example !So i can learn!!



    NeO
    I promise that I have read the FAQ and tried to use the Search to answer my question.

Similar Threads

  1. manual unpacking.. and i mean manual :)
    By Kr0n0 in forum Malware Analysis and Unpacking Forum
    Replies: 5
    Last Post: August 20th, 2002, 14:40
  2. how to unpacking manual?
    By tHE SnaKe in forum Malware Analysis and Unpacking Forum
    Replies: 10
    Last Post: June 16th, 2002, 11:29
  3. Help with manual unpacking!!
    By NeO in forum Malware Analysis and Unpacking Forum
    Replies: 2
    Last Post: February 13th, 2001, 15:32
  4. Where to find tut for manual unpacking Of Pecrypt 1.02 Or how do you do it!
    By NeO'X'QuiCk in forum Malware Analysis and Unpacking Forum
    Replies: 2
    Last Post: January 27th, 2001, 22:14

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •