1

I want to know the difference between stripped binary and obfuscated binary.

1 Answer 1

2

Stripped binary is the one that compiled without debugging information [symbols, strings]. For gcc compiler it's -s flag.

Obfuscated binary is the one where developer deliberately chose to make part of it [or all] less readable and harder to analyse/debug/disassemble. Obfuscation can impact:

  1. code - when author hide some parts of code sections and specific parts of executable code using cryptors/packers/various techniques of code polymorphism etc.
  2. resources - when author apply various tehnniques of obfuscation (crypto/packing/custom modification) on data (strings, data, configuration etc.)
  3. complete binary - when external executable/code used to completely hide presence of binary that should be hidden.
1
  • 4
    Well, actually stripped usually means that the information was removed afterward (which also matches the meaning of "to strip" in English) by means of strip or objcopy or similar.
    – 0xC0000022L
    Sep 4, 2018 at 8:18

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.