Wednesday, February 25, 2015

Primitive unpacking using emulation

In this post I examine unpacking an executable using a CSIM emulator. First I spend a few words on emulation techniques in general and then develop a CSIM made specifically to unpack a specific executable as a potential use case for emulators. The emulator that I made is very primitive and very much a work in progress. After all I wrote in less than 24 work hours. I will probably return to improve the emulator at a later point in time for other purposes.

Text can be found here:
https://www.dropbox.com/s/s86dgd7edc7q9u2/emulationunpacking.pdf?dl=0
Source codes here;
https://www.dropbox.com/s/ridm08q6uq2nw0v/x86Emulator.zip?dl=0

No comments:

Post a Comment