Questions tagged [entropy]

Entropy as a measurement of information density is used particularly in reverse code engineering (RCE) to tell apart compressed or encrypted pieces of data (or even code) from plain data.

Filter by
Sorted by
Tagged with
-1
votes
1answer
55 views

Best way to find the entropy of an EXE file?

I want to write a script to extract the entropy of each sections of an EXE file. What is the best tool that I can use to do this? I tried Ghidra but it doesn't have an entropy API which I can use.
1
vote
1answer
53 views

What does entropy mean and how can it be used? [duplicate]

I'm playing around with binwalk -E and am just looking at some entropy graphs as I try to reverse engineer some CTF binaries. I kinda understand the use of data/information entropy in cryptography (it'...
4
votes
5answers
3k views

What is an entropy graph

I am new to reversing and I see a tool Detect It Easy and it has a feature called Entropy. I want to know what it is used for?
0
votes
1answer
201 views

Can anyone help me identify and decode this string? [closed]

Below is a part of a code that I reversed with repy2exe and I want to understand what it does and especially how to decode the value in the "secret" variable: using = [ 'Mg==\n', 'MTA1\n', ...
1
vote
1answer
120 views

Removing randomness from program execution

So I have a program which is highly obfuscated and generates a unique output every time. For ease of reversing I want to make it so that the output is the same for every run (following the logic that ...
1
vote
3answers
2k views

How does PeID calculate entropy?

I'm curious about the entropy field value that shows up when a binary is dropped into PeID. Does someone know how it arrives upon this value?