1

I want to know the difference between stripped binary and obfuscated binary.

2

Stripped binary is the one that compiled without debugging information [symbols, strings]. For gcc compiler it's -s flag.

Obfuscated binary is the one where developer deliberately chose to make part of it [or all] less readable and harder to analyse/debug/disassemble. Obfuscation can impact:

  1. code - when author hide some parts of code sections and specific parts of executable code using cryptors/packers/various techniques of code polymorphism etc.
  2. resources - when author apply various tehnniques of obfuscation (crypto/packing/custom modification) on data (strings, data, configuration etc.)
  3. complete binary - when external executable/code used to completely hide presence of binary that should be hidden.
  • 4
    Well, actually stripped usually means that the information was removed afterward (which also matches the meaning of "to strip" in English) by means of strip or objcopy or similar. – 0xC0000022L Sep 4 '18 at 8:18

Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Not the answer you're looking for? Browse other questions tagged or ask your own question.