Flag: Tornado! Hurricane!

OpenRCE Packer Database >> WinUpack v0.39

Packer Name Packer Author Classification Analysis By Last Updated
WinUpack v0.39 Dwing Compressor saphex January 10 2008
Allocation Anti-Debug Anti-Disassembly Section Name Sample
PE header no no PS______, _xQ, [blank] N/A
Notes
Simple compressor, can strip relocs and export table. After restoring the import table trough GetProcAddress and LoadLibraryA, it does a return with the oep in the stack.

Transfer Command
00000000 85 C0              test    eax, eax
00000002 74 1F              jz      short 00000023
00000004 ; ...

0000001C 50                 push    eax
0000001D 53                 push    ebx
0000001E FF D5              call    ebp
00000020 AB                 stosd
00000021 EB ??              jmp     short value
00000023 C3                 retn
Entry Point Signature
00000000 BE ?? ?? ?? ??     mov     esi, value
00000004 AD                 lodsb
00000005 AD 50              push    eax
00000007 FF 76 34           push    dword ptr [esi+34h]
0000000A EB ??              jmp     short value
Known Unpackers

There are 30,782 total registered users.


Recently Created Topics
How can I write olly...
Oct/05
Career: Malware Reve...
Sep/30
How to produce separ...
Sep/20
How to decompile a f...
Sep/16
How to trap mouse cl...
Sep/03
Intel pin in loaded ...
Jun/27
Going to do today wi...
Jun/27
how to create delphi...
Jun/27
enabling menu in a s...
Jun/18
How to get the Image...
Jun/17


Recent Forum Posts
New LoadMAP plugin v...
mefisto...
Intel pin in loaded ...
djnemo
OOP_RE tool available?
Bl4ckm4n
OOP_RE tool available?
van7hu
Should binaries be n...
Kolisar
Problem with ollydbg
nullx42
!findtrampoline Immu...
skycrack
looking for a softwa...
raxen
Documenting reversed...
raxen
.orpc section what's...
mbin


Recent Blog Entries
oleavr
Oct/24
Anatomy of a code tracer

hasherezade
Sep/24
IAT Patcher - new tool for ...

oleavr
Aug/27
CryptoShark: code tracer ba...

oleavr
Jun/25
Build a debugger in 5 minutes

oleavr
Apr/17
frida.re 1.2.0 is out, with...

More ...


Recent Blog Comments
djnemo on:
Nov/17
Kernel debugger vs user mod...

acel on:
Nov/14
Kernel debugger vs user mod...

pedram on:
Dec/21
frida.github.io: scriptable...

capadleman on:
Jun/19
Using NtCreateThreadEx for ...

newlulu on:
Jun/10
Branch tracing and LBR acce...

More ...


Imagery
SoySauce Blueprint
Jun 6, 2008

[+] expand

View Gallery (11) / Submit