Flag: Tornado! Hurricane!

OpenRCE Packer Database >> WinUpack v0.39

Packer Name Packer Author Classification Analysis By Last Updated
WinUpack v0.39 Dwing Compressor saphex January 10 2008
Allocation Anti-Debug Anti-Disassembly Section Name Sample
PE header no no PS______, _xQ, [blank] N/A
Notes
Simple compressor, can strip relocs and export table. After restoring the import table trough GetProcAddress and LoadLibraryA, it does a return with the oep in the stack.

Transfer Command
00000000 85 C0              test    eax, eax
00000002 74 1F              jz      short 00000023
00000004 ; ...

0000001C 50                 push    eax
0000001D 53                 push    ebx
0000001E FF D5              call    ebp
00000020 AB                 stosd
00000021 EB ??              jmp     short value
00000023 C3                 retn
Entry Point Signature
00000000 BE ?? ?? ?? ??     mov     esi, value
00000004 AD                 lodsb
00000005 AD 50              push    eax
00000007 FF 76 34           push    dword ptr [esi+34h]
0000000A EB ??              jmp     short value
Known Unpackers

There are 30,779 total registered users.


Recently Created Topics
Intel pin in loaded ...
Jun/27
Going to do today wi...
Jun/27
how to create delphi...
Jun/27
enabling menu in a s...
Jun/18
How to get the Image...
Jun/17
OllyDBG Process Term...
Apr/28
Reversing opcode
Apr/24
Question about debbu...
Apr/16
IDA PRO Struct Point...
Apr/15
Problem with ollydbg
Mar/22


Recent Forum Posts
Intel pin in loaded ...
djnemo
OOP_RE tool available?
Bl4ckm4n
OOP_RE tool available?
van7hu
Should binaries be n...
Kolisar
Problem with ollydbg
nullx42
!findtrampoline Immu...
skycrack
looking for a softwa...
raxen
Documenting reversed...
raxen
.orpc section what's...
mbin
Pydbg load() issue
phreak


Recent Blog Entries
oleavr
Aug/27
CryptoShark: code tracer ba...

oleavr
Jun/25
Build a debugger in 5 minutes

oleavr
Apr/17
frida.re 1.2.0 is out, with...

gareebnavas
Jan/21
Android Malware Analysis

oleavr
Dec/21
frida.github.io: scriptable...

More ...


Recent Blog Comments
pedram on:
Dec/21
frida.github.io: scriptable...

capadleman on:
Jun/19
Using NtCreateThreadEx for ...

newlulu on:
Jun/10
Branch tracing and LBR acce...

newlulu on:
Jun/10
Advanced debugging techniques

newlulu on:
Jun/10
2 anti-trace mechanisms spe...

More ...


Imagery
SoySauce Blueprint
Jun 6, 2008

[+] expand

View Gallery (11) / Submit