UPX – Ultimate Packer for Executables

Re:UPX – Ultimate Packer for Executables by slezyr on Thursday October 12, 2017 @04:12PM (#15460937)

That's interesting. The UPX string is most likely a name of section in PE file. It's first UPX string you will find in the file.

How did UPX loader managed to find the section in which packed content is stored?

UPD. It's REALLY easy to "hack" this protection. You simply need to attach a debugger and you will see unprotected exe file in the memory. There are tools to convert loaded unprotected exe file into regular exe file on the disk. So... No one really tried to hack you. Sorry.

[ Parent | on HN ]

Re:UPX – Ultimate Packer for Executables by bruno2223 on Thursday October 12, 2017 @04:18PM (#15460979)

I dunno know. But this method worked for years!

[ Parent | on HN ]

Re:UPX – Ultimate Packer for Executables by slezyr on Thursday October 12, 2017 @04:22PM (#15461001)

See my update. You could only stop kids, who tried to use UPX unpackers.

[ Parent | on HN ]

Re:UPX – Ultimate Packer for Executables by bruno2223 on Thursday October 12, 2017 @04:30PM (#15461064)

Nice to know!

Well, It was another protection layer for, like you sad, to keep bad kids away.

This was 10 years ago already.

[ Parent | on HN ]

Re:UPX – Ultimate Packer for Executables by goldenkey on Thursday October 12, 2017 @04:49PM (#15461203)

Armadillo from Silicon Works is what anyone used if they were serious. You haven't met my friends Olly and Ada ;-)

[ Parent | on HN ]