Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [pe-resources]

files (icons, dialogs, translation strings, version information, manifest) embedded in a Portable Executable binary.

1
vote
1answer
28 views

find a dialog in ida using resource hacker

I am having difficulties finding the dialog reference in IDA. e.g. i can trace a dialog in "resource Hacker" or "PE Explorer" which looks like this: 5035 DIALOG 0, 0, 295, 163 STYLE DS_SETFONT | ...
0
votes
2answers
68 views

How are images found inside DLLs accessed? [closed]

Sometimes a program displays images that don't exist as jpegs or bmps that come with the program so they have to be residing inside the exe itself or inside a DLL that comes with the program. So My ...
0
votes
1answer
94 views

Resource Hacker and IDA PRO

How can I find the reference, in IDA, for the dialog and Menu I see in Resource Hacker (RH). e.g. I find, in RH the following Menu items: POPUP "Painter" { MENUITEM "Start/Continue", 32840 ...
0
votes
0answers
66 views

Changing codepage of an application

I'm trying to translate a small game from German to Russian. I tried PE Explorer and ResHack. Now in ResHack, when I type in Unicode, I see the correct Cyrillic characters, but when compiled it shown ...
1
vote
0answers
627 views

Extract resources from compiled “resource file”

I am facing a compiled resource file for a mobile app (an Android one), built using moSync Framework (http://www.mosync.com). This resource file contains media(images, audio), strings, JS/HTML code ...
0
votes
0answers
433 views

Does malware ever purposely embed resources to thwart resource analysis and extraction

I have been analyzing a Kazy (derp) Ramdo variant that is relatively recent and was surprised to see an access violation in resource hacker when trying to view an embedded bitmap. Is this common or ...
1
vote
1answer
232 views

What data before the code segment in PE files?

According to IDA the file I'm inspecting has imagebase 0x400000. The first data I can see starts at 0x401000 but the program reads some data which is at 00400174. When I put a data access breakpoint ...
2
votes
2answers
223 views

Secure resources from being extracted?

I have a jar file with a resources folder, and I have converted it to EXE using Launch4J. How can I protect my resources from being extracted using winzip/winrar ?
6
votes
1answer
169 views

Where are program resources stored in a CIL assembly?

In a CIL assembly, where are resources stored? I am trying to reverse engineer a sample that appears to be protected by a .NET crypter. The CIL assembly for the sample does a SHA256 decryption on a ...
8
votes
5answers
13k views

Freely available resource hacking applications

I am using Resource Hacker as a tool to extract out resources like icon, images, etc. from .dll or .exe file. In addition, I am using it to crack some small Windows application. However, it does not ...
13
votes
3answers
1k views

How to prevent use of Resource editors

There are variety of tools that allow editing the resources of Windows executables. These tools allow a very easy interface for changing the programs look and feel. Replacing icons, text, menus can be ...