Questions tagged [packers]

A chain of software made to build self-extractable archived software (with a focus on compression and/or on obfuscation). Packer prevent most of the static analysis techniques and force the reverser to *depack* dynamically the software before analyzing it.

7 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
1 vote
0 answers
91 views

silvio packer for shared libray leads to error: "ELF load command address/offset not properly aligned"

I'm trying to implement a packer based on silvio infection. The packer works fine for ET_EXEC. However, it failed with "ELF load command address/offset not properly aligned" error for the ...
user avatar
  • 71
1 vote
0 answers
50 views

failed to trigger packer's loader by overwritting the entry of rela.dyn on aarch64

I have implemented packer of x86_64 shared library. Briefly, a loader is injected to a shared library, and the rela.dyn entry is modified such that it points to the address of the loader. Once the ...
user avatar
  • 71
1 vote
0 answers
48 views

Is this executable packed, encrypted or what?

I have an executable that I'd like to patch, but I'm very new to RE. I some have assembly knowledge of x86 as first learned language last year, but not of this one: PowerPC (in this case is PPC32), ...
user avatar
  • 156
1 vote
0 answers
118 views

Packers that partially decrypts contents on-the-fly

I'm on the lookout for packers that I could use/read the source for, that don't decrypt the contents of the original binary in one go and jump to it. Do you know of any packer that decodes/decrypts a ...
user avatar
1 vote
0 answers
262 views

How to remove SimplePack signature so it won't be detected by AVs

I've tried SimplePack, which is an open-source file packer for windows, now, for some reasons, when I check via online virus-checkers, lots of alerts are being popped saying the file is crypted using ...
user avatar
0 votes
0 answers
180 views

How to identify if an .exe packed by VMProtect has virtualization enabled?

I am interested in reverse engineering a few parts of an .exe application (windows 32-bit executable) that downloads some documents from a server and decrypts them locally in memory. Using PE EXE ...
user avatar
0 votes
0 answers
726 views

How to disassemble an obfuscated .NET DLL?

I asked earlier about unpacking a packed .NET exe. But now I need to see the source code for an obfuscated DLL: Any idea how to unpack it?
user avatar
  • 1,315