1

I am working on firmware update file prod-build-Isat2-V02.00.03-DFU.fp2. I extracted it and I've got some bin files. I analyzed these binary files with binwalk:

binwalk -E RDA-533.bin

The entropy of these bin files didn't give any information and when I opened these files with IDA, it didn't give subblocks and functions. It seems these files are compressed or encrypted. How can I analyze these bin files as efficiently as possible?

Thanks in advance

0

You can find files File1.bin ... File6.bin in "C:\temp" directory after running IsatPhone 2 Firmware Upgrade Tool and selecting firmware. It does not need a connection to physical device, just firmware and tool.Unfortunately you can't decrypt these files in contrast to "IsatPhone Pro" model in which files were not encrypted.

  • Thanks for your response, I statistically analyzed extracted files, what are your reasons that file is encrypted? Because of entropy of extracted file, Doesn't it compressed or encrypted? – h msvi Apr 29 at 11:31
  • I can't share my report related to this research due to NDA. You can trust me or not, but I'm 100% sure this firmware is encrypted. – Igor Matyuh Apr 29 at 20:57
  • Thanks for helpful answer, but I'm studying on working encryption methods of firmware updates generally. Would it be possible if you give me a sample of firmware with specific encryption method for my work? – h msvi Apr 30 at 5:33

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.