Results 1 to 3 of 3

Thread: how to tell which packer used on *.exe

  1. #1
    ()whore
    Guest

    how to tell which packer used on *.exe

    Well the title says it all. I have stumbled onto a target MP3 Navigator that is proving difficult. It is obviously packed but I haven't been able to figure out what program it is packed with. GetType didn't recognize it.
    If anyone wants to look at MP3 Navigator it seams quite well protected. Not only is it packed but it shuts down reg mon and file mon when it is run. And it does some kind of CRC checking. When I tried to change things in the PEheader it gave me "this program has been tampered with" message.
    I think if I could get it unpacked I could gut this bastard but need some help getting that done.
    thanks
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  2. #2
    meRlin
    Guest
    Hi,
    Well the first and the most easy way you can find out wich packer that have been used, open target file in your hexeditor and take a look at the header or use quickview or ..... the list is long.
    As those packers delete some section names you can only tell wich one thats been used at a specific target if you unpack them as they appear or as you did, ask someone who should know.
    If this link is leading to your target (updated today) http://www.vertexlab.com I should guess it's packed with some ASPack/ASProtect.

    sorry for my bad english

    regards
    meRlin
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  3. #3
    hz
    Guest
    hi,
    language2000 at protools is a good util, recognises most (not all), upto the new asprotect. If it is asprotect get Casper while your there.

    Hi MeRlin, how's it going.
    I promise that I have read the FAQ and tried to use the Search to answer my question.

Similar Threads

  1. What packer is this?
    By Segfault in forum Malware Analysis and Unpacking Forum
    Replies: 1
    Last Post: January 13th, 2011, 10:25
  2. what is this packer?
    By mysters in forum Malware Analysis and Unpacking Forum
    Replies: 11
    Last Post: January 16th, 2006, 16:24
  3. the new packer
    By gunterg in forum Malware Analysis and Unpacking Forum
    Replies: 8
    Last Post: December 22nd, 2004, 13:29
  4. Is this packer New ??
    By Zilot in forum Malware Analysis and Unpacking Forum
    Replies: 9
    Last Post: August 20th, 2003, 04:05
  5. what packer :(
    By silverstorm in forum Malware Analysis and Unpacking Forum
    Replies: 5
    Last Post: August 5th, 2002, 13:58

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •