2

I'm trying to reverser a bin file with Ghidra, without success for the moment, I can't find any functions in the decompiled file. he bin file is for an ARM 32bits, I'm pretty sure this is an stm32, so I've followed some tutorial for use Ghidra with stm32, this one for example

  1. select cortex little and set flash address
  2. set flash_mirror address
  3. set RAM address
  4. Analyse the bin file

but I have no functions when I analysed the file. Any idea ? Encrypted firmware may be ? Here is the BIN file, I've also try ti work with binwalk, without success

Improve this question
1
  • I have just started working on firmware. Can I get the code for entropy analysis and by any chance tell me how to implement it?
    – Bushra Batool Abbas
    Commented Jan 14, 2023 at 19:34

1 Answer 1

Reset to default
1

Looks like it is encrypted. Entropy is to high.

enter image description here

Improve this answer
2
  • Yep it was also my guess after using binwalk. It will be hard to decrypted without boot loader
    – simon
    Commented Oct 27, 2022 at 20:20
  • How do you distinguish encryption from compression based alone on entropy? Couldn't it equally be compressed instead of encrypted?
    – 0xC0000022L ♦
    Commented Jan 16, 2023 at 9:43

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.