OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: [Full-disclosure] PAPER: Generic Unpacking of Self-modifying, Aggressive, Packed Binary Programs

From: Thierry Zoller (ThierryZoller.lu)
Date: Mon May 25 2009 - 11:54:15 CDT


Hi Piotr,

Any information with regards to how MMMBoB performs when trying to
unpack a bit more obfuscated/aggressive packers like Themida / VMprotect ?

----

On a side note:
I see often that some generic unpackers are rarely cited/referenced,
although they are interesting and perform astonishingly well.

Here are two generic unpackers I think deserve some exposure too :

- RL!unpack
  http://ap0x.jezgra.net/unpackers.html
  (tested against 101+ packers/mods)

- Quickunpack
   http://rapidshare.com/files/104264619/qunpack21.zip

--
http://blog.zoller.lu
Thierry Zoller

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/