-3

in the context of reversing a packed binary, what does VA and OEP means? and How can IAT be fixed manually?

closed as too broad by julian, perror, Paweł Łukasik, NirIzr, kn0x Nov 23 '17 at 15:24

Please edit the question to limit it to a specific problem with enough detail to identify an adequate answer. Avoid asking multiple distinct questions at once. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.

  • 1
    This is too broad and actually 3 different questions. Please separate the questions and add more information such as what you already now, what did you read, what are the specific points that you don't understand. See the How to Ask page for help clarifying this question. – Megabeets Nov 18 '17 at 13:55
1

VA = virtual address. See VA (Virtual Address) & RVA (Relative Virtual Address)

OEP = original entry point. See Unpacking binaries in a generic way

How does IAT be fixed manually?

This question was asked and answered here: How would I go about rebuilding the IAT of a packed executable?

Have a look at Scylla as well.

  • I dont understand the example for IAT you provided, how does he know where to find IAT addresses? – clueless_n00b Nov 18 '17 at 20:45

Not the answer you're looking for? Browse other questions tagged or ask your own question.