Results 1 to 4 of 4

Thread: OllyDbg unable to proceed

  1. #1
    alan
    Guest

    OllyDbg unable to proceed

    When I attach OllyDbg to a program, I get the message:

    Quick statistical test of module "xxx" reports that its code section is either compressed, encrypted, or contains large amounts of embedded data. Results of code analysis can be very unreliable or simply wrong. Do you want to continue analysis?

    I would be grateful if someone could give me a few hints as to how to proceed with this project?

    I am currently at grade "nobrainer", but I am 25% towards grade "lamer".

    Regards,
    Alan
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  2. #2
    Super Moderator
    Join Date
    Dec 2004
    Posts
    1,529
    Blog Entries
    15

    OllyDbg unable to proceed

    it means olly has analysed the exe and found that it is packed or compressed or encrypted or whatever like it says
    now if you still say yes olly will assume you know better and analyse the app and show you the garbage analysis
    if you say no olly wont analyse but will just stop on the code and will let you find what is the mystery

    that means you have to find some file identification programs
    which would do some analysis based on predefined signatures and
    may give you an educated guess as to what this app might be packed or compressed or encrypted with

    there are many floating around the most popular one is peid by snaker

    now if you run peid on the app it may say
    packed with upx --- blah blah blah by blah blah version blah blha blah

    if it was that simple then you can use upx itself with commandline option
    -d to unpack it or if you are faced with some tough jock like
    execryptor or similar then you are doomed for now or till you learn
    more about packing unpacking crypting and such nocturnal roaming stuffs
    have fun

  3. #3
    alan
    Guest

    OllyDbg unable to proceed

    Thanks. PEID identified the packer.

    Regards,
    Alan
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  4. #4
    cridia
    Guest

    OllyDbg unable to proceed

    PEID always error when system running other program,why? i use win2000.
    I promise that I have read the FAQ and tried to use the Search to answer my question.

Similar Threads

  1. Cannot proceed - Packed EXE?
    By live_dont_exist in forum Malware Analysis and Unpacking Forum
    Replies: 9
    Last Post: November 11th, 2011, 23:16
  2. Debugged program unable to process exception
    By _InSaNe_ in forum Malware Analysis and Unpacking Forum
    Replies: 10
    Last Post: September 27th, 2007, 22:02
  3. unable to save changes in exe file by Ollydbg
    By blondakke in forum OllyDbg Support Forums
    Replies: 17
    Last Post: August 29th, 2006, 04:57
  4. Debugged program unable to process exception
    By abitofboth_ in forum OllyDbg Support Forums
    Replies: 6
    Last Post: April 13th, 2005, 05:28
  5. ollydbg unable to load the program!
    By Anonymous in forum Bugs
    Replies: 13
    Last Post: January 30th, 2003, 15:54

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •