Results 1 to 2 of 2

Thread: Aspack unpacked dll relocations ignored

  1. #1
    djpaul1963
    Guest

    Aspack unpacked dll relocations ignored

    Hello,

    I unpacked with Aspackdie 1.4 a dll packed with Aspack 1.12 and I fixed the base relocation directory address and size because they were wrong. Now I can see the relocs from inside PE Tools but when the dll is loaded from the program it seems the relocations are ignored from the PE loader (win2000). All relative address remain at their original linked values (1000000 is the image base but the dll is loaded at 46C000 usually). I don't have win 98 installed to see if it's a Win 2000 problem only, but maybe someone of you may have the answer already?

    Thanks in advance

    Dj
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  2. #2
    djpaul1963
    Guest

    Solved!

    Well,

    After tracing inside ntdll i discovered that relocations fixup was indeed taking place but somehow the image base of the dll was set to an invalid value (FFFFFFFF) and therefore all thins got messed up!
    I don't know how this happened but now it's fixed and the dll is loading just fine

    Thanks,

    Dj
    I promise that I have read the FAQ and tried to use the Search to answer my question.

Similar Threads

  1. ASPACK problems with DLL (relocations?)
    By friedo in forum Malware Analysis and Unpacking Forum
    Replies: 3
    Last Post: November 2nd, 2004, 11:10
  2. Aspack 2.12? Maybe...
    By HellSoul in forum Malware Analysis and Unpacking Forum
    Replies: 3
    Last Post: September 5th, 2004, 16:25
  3. SafeSerial (sase.ocx Aspack)
    By JanDebug in forum Malware Analysis and Unpacking Forum
    Replies: 9
    Last Post: December 19th, 2002, 23:35
  4. Aspack trouble
    By Soldat in forum Malware Analysis and Unpacking Forum
    Replies: 5
    Last Post: August 27th, 2002, 20:05
  5. how to unpack Dll file for Aspack 2.12 ?
    By kernel5 in forum Malware Analysis and Unpacking Forum
    Replies: 29
    Last Post: March 14th, 2002, 17:23

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •