Results 1 to 5 of 5

Thread: unknown crypter/packer

  1. #1
    Rip
    Guest

    Red face unknown crypter/packer

    hi,

    recently, i've tried to crack a proggy called PrintPoint 4.5 (h**p://w*w.printpoint.com/demo/downloads/PrintPoint_4.5_Setup.exe). This piece of software is protected only by a sn, very strange for a 4000 usd appz. My problem is that this program is packed with an unknown packer (no file analyzer was able to give me an info regarding the packer/crypter used). Among other usual things, the PE header contain a section called "WINTH_TE". I've tried also manual unpacking, but since i've no access to a Win9x system, the options are limited. Any ideea of the packer/crypter used? Maybe someone else saw this "WINTH_TE" section in other programs.

    thx a lot

    Rip
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  2. #2
    me8
    Guest
    guessing it could be telock, but am sure 90% that's not...
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  3. #3
    DakienDX
    Guest
    Hello Rip !

    The reason why no file analyzer can tell you which packer is used is that NO packer is used. I just checked the main .EXE and looked at a normal Win32-PE file with no special protection in it. The section "WINTH_TE" is a normal section containing code too. The OEP is located in the ".code" section and has also no special meaning.

    It is usual that some programs have more than one code segment. Sometimes you have "AUTO"/"CODE", sometimes ".code"/".code1", so why not ".code"/"WINTH_TE"? I don't know the reason why, but it may be that the program's authors link some compiler incompatible code with the program.
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  4. #4
    Rip
    Guest

    Smile

    DakienDX,

    thx for your very kind research :-)

    Can i contact you by e-mail? I've some other few things to clarify regarding this software. Hope u can light my mind.
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  5. #5
    DakienDX
    Guest
    Hello Rip !

    Why do you want to contact me by E-Mail?
    Do you think I'm the only one here who can help you?
    Do you think nobody is interested in the target?

    You can explain any problems you have here.
    So, where are you stuck?
    I promise that I have read the FAQ and tried to use the Search to answer my question.

Similar Threads

  1. what are differences between a packer and a crypter?????
    By kbt0000 in forum The Newbie Forum
    Replies: 5
    Last Post: March 28th, 2012, 00:46
  2. Looking for a GOOD packer/crypter
    By markh51 in forum Malware Analysis and Unpacking Forum
    Replies: 9
    Last Post: March 1st, 2006, 11:02
  3. unknown packer
    By chlankboot in forum Malware Analysis and Unpacking Forum
    Replies: 19
    Last Post: January 19th, 2004, 05:33
  4. Unknown packer/crypter
    By bedrock in forum Malware Analysis and Unpacking Forum
    Replies: 2
    Last Post: February 13th, 2003, 05:27
  5. Help with unknown packer
    By Timmy in forum Malware Analysis and Unpacking Forum
    Replies: 3
    Last Post: November 7th, 2000, 06:44

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •