Flag: Tornado! Hurricane!

OpenRCE Packer Database >> MEW 11 SE v1.1

Packer Name Packer Author Classification Analysis By Last Updated
MEW 11 SE v1.1 Northfox Compressor saphex January 10 2008
Allocation Anti-Debug Anti-Disassembly Section Name Sample
PE header no no __u_____, MEW N/A
Notes
Simple compressor that uses LZMA compression, can strip relocs. It does a return with the oep in the stack to transfer execution flow.

Transfer Command
00000000 56                 push    edi
00000001 AD                 lodsd
00000002 0F C8              bswap   eax
00000004 ; ...

0000000E 50                 push    eax
0000000F 55                 push    ebp
00000010 FF 53 ??           call    dword ptr [ebx-value]
00000011 AB                 stosd
00000012 75 E7              jnz     00000000
00000013 C3                 retn
Entry Point Signature
00000000 E9 ?? ?? ?? ??     jmp     value
00000005 00
00000006 00
00000007 00
00000008 02
00000009 00
0000000A 00
0000000B 00
0000000C 0C
0000000D 80
Known Unpackers

There are 30,784 total registered users.


Recently Created Topics
Question about memor...
Dec/12
How can i find conne...
Nov/27
How can I write olly...
Oct/05
Career: Malware Reve...
Sep/30
How to produce separ...
Sep/20
How to decompile a f...
Sep/16
How to trap mouse cl...
Sep/03
Intel pin in loaded ...
Jun/27
Going to do today wi...
Jun/27
how to create delphi...
Jun/27


Recent Forum Posts
New LoadMAP plugin v...
mefisto...
Intel pin in loaded ...
djnemo
OOP_RE tool available?
Bl4ckm4n
OOP_RE tool available?
van7hu
Should binaries be n...
Kolisar
Problem with ollydbg
nullx42
!findtrampoline Immu...
skycrack
looking for a softwa...
raxen
Documenting reversed...
raxen
.orpc section what's...
mbin


Recent Blog Entries
oleavr
Oct/24
Anatomy of a code tracer

hasherezade
Sep/24
IAT Patcher - new tool for ...

oleavr
Aug/27
CryptoShark: code tracer ba...

oleavr
Jun/25
Build a debugger in 5 minutes

oleavr
Apr/17
frida.re 1.2.0 is out, with...

More ...


Recent Blog Comments
djnemo on:
Nov/17
Kernel debugger vs user mod...

acel on:
Nov/14
Kernel debugger vs user mod...

pedram on:
Dec/21
frida.github.io: scriptable...

capadleman on:
Jun/19
Using NtCreateThreadEx for ...

newlulu on:
Jun/10
Branch tracing and LBR acce...

More ...


Imagery
SoySauce Blueprint
Jun 6, 2008

[+] expand

View Gallery (11) / Submit