Results 1 to 2 of 2

Thread: A little crackme

  1. #1
    raven58
    Guest

    A little crackme

    Working on a crackme. Get type says this is a DOS executable file packed with ASPACK 1.082. After unpacking and saving the file using procdump, WDASM states that "PE file not in standard windows format- no string references". Should this crackme have been unpacked using a dos unpacker? Is there a way to see the string references in wdasm?

    Thanks
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  2. #2
    goatass
    Guest
    No there is no need to unpack it with a DOS unpacker, your problem is that the RVAs of the sections in the PE header are wrong, the reason why you are not seeing any strings is because your PE header is not pointing to the correct RVA of the RSRC section. You need to read some more about the PE header and some more tuts on unpacking.

    goatass
    I promise that I have read the FAQ and tried to use the Search to answer my question.

Similar Threads

  1. Need help with crackme
    By lucid_dream in forum The Newbie Forum
    Replies: 4
    Last Post: January 12th, 2005, 04:32
  2. help with this crackme
    By chitech in forum Mini Project Area
    Replies: 2
    Last Post: August 28th, 2002, 11:41
  3. try this crackme
    By SaNGa in forum Mini Project Area
    Replies: 11
    Last Post: June 4th, 2002, 20:13
  4. int 20 (hinte's crackme #6)
    By ZaiRoN in forum Mini Project Area
    Replies: 26
    Last Post: March 7th, 2002, 16:40

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •