Hello,
I have a problem with my OllyDbg 1.10 (Win7 + OllyAdvanced 1.26) during analyse of exe with invalid PE header. Simple mess in BaseOfCode/BaseOfData (i.e 40001000), where IB is ordinary, and NumberOfRvaAndSizes set on 40000004 ... As an addition this exe contain filled DirectoryInformation for ExportTable.
So what's wrong? Simply opening malicious crackme makes Olly crashes - Access Violation? To make it more interesting, whilst debugging OllyDbg (in another instance of Olly) and loading this faulty app - Ollydbg analyses as it should with OllyAdvanced, what means - not crashes.
Any ideas what to do/check ?
MGeeky.







