Questions tagged [dump]
The dump tag has no usage guidance.
10
questions
1
vote
0answers
25 views
static core dump analysis
I got a coredump from an unknow binary. I want to retrieve as many information as possible (memory, register, contexte..)
Most of the answers available on the web speak about coredump analysis using ...
4
votes
1answer
536 views
How to dump firmware from car head-unit (VW Radio)
I have a VW Radio which has the possibility to upgrade software via USB. Unfortunately I am not able to find any updates, nor any information regarding the current Software version on the whole ...
1
vote
0answers
49 views
How to identify the NonPagedPool Start Memory address from a memory dump
I need to find the memory address where starts the NonPagedPool. I saw some people doing it with Rekall, but I'm having a lot of problems with it.
Is that possible with Volatility ?
Tks
3
votes
1answer
107 views
Certain bytes in the memory (RAM) get changed after the program starts. Why?
I'm in a situation where I have an executable file. When I start it within the debugger (x32dbg), with breakpoints set to every occasion (DLL entry, DLL load, Thread start,..), to restrict the amount ...
3
votes
2answers
558 views
How to dump a firmware from an old cell phone with Linux?
I have a "MiracleBox" software for GSM repairing and and old cell phone (Wiko Lubi 4) with a RD8851CL chip inside.
With this MiracleBox running on Windows I can make a dump of this chip without ...
5
votes
3answers
178 views
Finding a malware object inside PE file
Today my AV found an antique piece of malware called Win9X.CIH.dam.
Instead of just removing it I would like to make a little research for fun.
What does "data0513" exactly mean? I can't understand ...
7
votes
3answers
5k views
Extracting a NAND flash dump with OOB data
I'm trying to extract a NAND flash dump of an old Walkman player. The dump was done by a friend and unfortunately cannot be redone because the chip was destroyed.
The dump was supposed to be just user ...
2
votes
1answer
431 views
Dump firmware from MC9S08EL32 MCU
I have a datasheet of the HCS08 micro-controller family from NXP. I have a Raspberry Pi and some time. I admit that this is my first time delving this deep into hardware RE, so be gentle with me.
I ...
1
vote
1answer
286 views
Need script to analyze process dump file (windows)
I have a program written in c++, it's compiled with Visual Studio.
I have a mini dump file of a running process (process generates it using winapi MiniDumpWriteDump function).
I also have several ...
0
votes
1answer
59 views
Dump data from segments.io /segment.com with apikey
I am analyzing an app and in it's data I found an apikey for segments.io.
Using this apikey, is it possible to see what data is stored or perhaps even dump it?