Skip to main content
Source Link
julian
  • 7.2k
  • 3
  • 23
  • 56

Always verify the results of a signature scan before attempting extraction.

There are no LZMA-compressed regions in this binary. Here is the output of a signature scan using binwalk v2.1.1:

$ binwalk FW96650A.bin

DECIMAL       HEXADECIMAL     DESCRIPTION
--------------------------------------------------------------------------------
167266        0x28D62         Unix path: /15/20/24/25/30/60/120/240fps can be served..
279206        0x442A6         Copyright string: "Copyright (c) 2012 Novatek Microelectronic Corp."
2158492       0x20EF9C        JPEG image data, JFIF standard 1.02
2195060       0x217E74        MySQL ISAM compressed data file Version 6

Here are the results of the entropy analysis:

Entropy scan

$ binwalk -E FW96650A.bin

DECIMAL       HEXADECIMAL     ENTROPY
--------------------------------------------------------------------------------
0             0x0             Falling entropy edge (0.574748)
2158592       0x20F000        Rising entropy edge (0.963265)  <-- JPEG image
2170880       0x212000        Rising entropy edge (0.981137)
2179072       0x214000        Falling entropy edge (0.708192)
2363392       0x241000        Falling entropy edge (0.846409)
2426880       0x250800        Falling entropy edge (0.848443)
2496512       0x261800        Rising entropy edge (0.974327)
2510848       0x265000        Rising entropy edge (0.968564)
2525184       0x268800        Falling entropy edge (0.764579)
2529280       0x269800        Rising entropy edge (0.953455)
2533376       0x26A800        Falling entropy edge (0.717140)
2537472       0x26B800        Rising entropy edge (0.966682)
2543616       0x26D000        Rising entropy edge (0.953760)
2545664       0x26D800        Falling entropy edge (0.763122)
2588672       0x278000        Rising entropy edge (0.960725)
2592768       0x279000        Rising entropy edge (0.967902)
2603008       0x27B800        Rising entropy edge (0.966048)
2609152       0x27D000        Rising entropy edge (0.973450)
2617344       0x27F000        Falling entropy edge (0.749652)

There are some regions of high entropy, but nothing indicating LZMA compression.