Reverse Engineering Beta

Questions tagged [dump]

Ask Question

The tag has no usage guidance.

10 questions
Newest
Active
Bountied
Unanswered
Filter by
Sorted by
Tagged with
1
vote
0answers
25 views

static core dump analysis

I got a coredump from an unknow binary. I want to retrieve as many information as possible (memory, register, contexte..) Most of the answers available on the web speak about coredump analysis using ...
4
votes
1answer
536 views

How to dump firmware from car head-unit (VW Radio)

I have a VW Radio which has the possibility to upgrade software via USB. Unfortunately I am not able to find any updates, nor any information regarding the current Software version on the whole ...
1
vote
0answers
49 views

How to identify the NonPagedPool Start Memory address from a memory dump

I need to find the memory address where starts the NonPagedPool. I saw some people doing it with Rekall, but I'm having a lot of problems with it. Is that possible with Volatility ? Tks
3
votes
1answer
107 views

Certain bytes in the memory (RAM) get changed after the program starts. Why?

I'm in a situation where I have an executable file. When I start it within the debugger (x32dbg), with breakpoints set to every occasion (DLL entry, DLL load, Thread start,..), to restrict the amount ...
3
votes
2answers
558 views

How to dump a firmware from an old cell phone with Linux?

I have a "MiracleBox" software for GSM repairing and and old cell phone (Wiko Lubi 4) with a RD8851CL chip inside. With this MiracleBox running on Windows I can make a dump of this chip without ...
5
votes
3answers
178 views

Finding a malware object inside PE file

Today my AV found an antique piece of malware called Win9X.CIH.dam. Instead of just removing it I would like to make a little research for fun. What does "data0513" exactly mean? I can't understand ...
7
votes
3answers
5k views

Extracting a NAND flash dump with OOB data

I'm trying to extract a NAND flash dump of an old Walkman player. The dump was done by a friend and unfortunately cannot be redone because the chip was destroyed. The dump was supposed to be just user ...
2
votes
1answer
431 views

Dump firmware from MC9S08EL32 MCU

I have a datasheet of the HCS08 micro-controller family from NXP. I have a Raspberry Pi and some time. I admit that this is my first time delving this deep into hardware RE, so be gentle with me. I ...
1
vote
1answer
286 views

Need script to analyze process dump file (windows)

I have a program written in c++, it's compiled with Visual Studio. I have a mini dump file of a running process (process generates it using winapi MiniDumpWriteDump function). I also have several ...
0
votes
1answer
59 views

Dump data from segments.io /segment.com with apikey

I am analyzing an app and in it's data I found an apikey for segments.io. Using this apikey, is it possible to see what data is stored or perhaps even dump it?