| [Question] Hỏi về unpack dll được pack bằng PESPIN |
08/05/2009 00:29:28 (+0700) | #1 | 179841 |
heroes1412
Member
![[Minus]](/hvaonline/templates/viet/images/minus.gif "[Minus]") |
0 |
![[Plus]](/hvaonline/templates/viet/images/plus.gif "[Plus]")
|
|
Joined: 19/10/2008 21:22:30
Messages: 11
Offline
|
|
Hiện em có 2 file bị pack bằng PESPIN, dùng PEiD thì nó chỉ báo " PESpin 0.3x - 1.xx ->cyberbob"
Em chỉ biết unpack các file exe thôi chứ dll thì làm kiểu gì, ai bik giúp em cái ?
Link 2 file nè:
http://www.mediafire.com/download.php?tnyk2kwnmmq |
|
|
| [Question] Re: Hỏi về unpack dll được pack bằng PESPIN |
08/05/2009 01:27:04 (+0700) | #2 | 179848 |
mfeng
Researcher
|
Joined: 29/10/2004 15:16:29
Messages: 243
Offline
|
|
| Unpack dll cũng tương tư như exe, chỉ chú ý thêm ở phần fix Relocation Table. |
|
|
| [Question] Re: Hỏi về unpack dll được pack bằng PESPIN |
12/05/2009 05:24:40 (+0700) | #3 | 180283 |
heroes1412
Member
|
|
0 |
|
|
Joined: 19/10/2008 21:22:30
Messages: 11
Offline
|
|
Bạn làm luôn cho mình được không?
Hỏi bạn là ngoài peid ra thì còn cái soft nào phát hiện packer nữa không ?
Thanks |
|
|
| Users currently in here |
|
1 Anonymous
|
|
Powered by JForum - Extended by HVAOnline
hvaonline.net | hvaforum.net | hvazone.net | hvanews.net | vnhacker.org
1999 - 2013 ©
v2012|0504|218|
|
|
![[Rule]](/hvaonline/templates/viet/images/icon_mini_rule.gif "[Rule]"){kind=icon}
![[Home]](/hvaonline/templates/viet/images/icon_mini_groups.gif "[Home]"){kind=icon}
![[Portal]](/hvaonline/templates/viet/images/icon_mini_portal.gif "[Portal]"){kind=icon}
![[Members]](/hvaonline/templates/viet/images/icon_mini_members.gif "[Members]"){kind=icon}
![[Statistics]](/hvaonline/templates/viet/images/icon_mini_stats.gif "[Statistics]"){kind=icon}
![[Search]](/hvaonline/templates/viet/images/icon_mini_search.gif "[Search]"){kind=icon}
![[Reading Room]](/hvaonline/templates/viet/images/icon_mini_book.gif "[Reading Room]"){kind=icon}
![[Register]](/hvaonline/templates/viet/images/icon_mini_register.gif "[Register]"){kind=icon}
Register![[Login]](/hvaonline/templates/viet/images/icon_mini_login.gif "[Login]"){kind=icon}
Login [
Thủ thuật reverse engineering
![[Profile]](/hvaonline/templates/viet/images/en_US/icon_profile.gif "[Profile]"){kind=icon}
![[PM]](/hvaonline/templates/viet/images/en_US/icon_pm.gif "[PM]"){kind=icon}
![[Up]](/hvaonline/templates/viet/images/en_US/icon_up.gif "[Up]"){kind=icon}
![[Print Copy]](/hvaonline/templates/viet/images/en_US/icon_print.gif "[Print Copy]"){kind=icon}
![[digg]](/hvaonline/templates/viet/images/digg.gif "[digg]")
![[delicious]](/hvaonline/templates/viet/images/delicious.gif "[delicious]")
![[google]](/hvaonline/templates/viet/images/google.gif "[google]")
![[yahoo]](/hvaonline/templates/viet/images/yahoo.gif "[yahoo]")
![[technorati]](/hvaonline/templates/viet/images/technorati.gif "[technorati]")
![[reddit]](/hvaonline/templates/viet/images/reddit.gif "[reddit]")
![[stumbleupon]](/hvaonline/templates/viet/images/stumbleupon.gif "[stumbleupon]")