Topic created on: January 4, 2008 04:43 CST by sziecuas.
Can i know with witch compiler a program had been compiled?
i want to know if there is a tool that allow me to know if a program was created by Borland C++ compiler, Visual C++, or another compiler?
there are some tools like peid, rdg packer detector, die (detect it easy), exeinfope which try to tell you the compiler. if the binary you want to analyse is protected in some way, the results of the above mentioned tools maybe fooled. then first a clean unpacking is needed to get a better clue, what compiler was originally used.
further an analysis of the imported functions may help, e.g. an imported rtcMsgBox is a good sign for a visual basic application or a ThunRTMain and so forth.
When I worked at Sabre, Ero Carrera (I think it was; might've been Halvar) had an excellent idea for determining the compiler, its version and optimization settings via mathematics. We didn't test it during my time there, but it had the potential to work very well. I don't think they've released the idea, so I won't spill the beans, but I hope they talk about it someday.
Note: Registration is required to post to the forums.