I'm reverse engineering a program from a memory dump using Ghidra. I know there are sections which contain images and sampled sound data in a raw format.

I'm looking for a tool which will let me view the raw binary as an image so I can find those parts and extract them. Can I do this in Ghidra? Or is there another tool I can use?

1 Answer 1


You can try X-ways Forensics, it has nice option of analyzing any disk image or memory dump.

Or perhaps another tool such as Restorator can also be used for the above mentioned scenario.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.