in the context of reversing a packed binary, what does VA and OEP means? and How can IAT be fixed manually?

  • 1
    This is too broad and actually 3 different questions. Please separate the questions and add more information such as what you already now, what did you read, what are the specific points that you don't understand. See the How to Ask page for help clarifying this question. – Megabeets Nov 18 '17 at 13:55

VA = virtual address. See VA (Virtual Address) & RVA (Relative Virtual Address)

OEP = original entry point. See Unpacking binaries in a generic way

How does IAT be fixed manually?

This question was asked and answered here: How would I go about rebuilding the IAT of a packed executable?

Have a look at Scylla as well.

| improve this answer | |
  • I dont understand the example for IAT you provided, how does he know where to find IAT addresses? – clueless_n00b Nov 18 '17 at 20:45

Not the answer you're looking for? Browse other questions tagged or ask your own question.