Full Disclosure mailing list archives

RE: Unpacking Sasser

From: Angelaix () aol com
Date: Sun, 2 May 2004 19:21:50 EDT

The worm executable is packed with PeCompact v2

http://www.collakesoftware.com/PEC2.HTM

Packed: 15872 bytes
Unpacked 32Kb

Current thread:

Re: Unpacking Sasser, (continued)
- - Re: Unpacking Sasser Byron Copeland (May 02)
- Re: Unpacking Sasser Andrew Ruef (May 02)
  - Re: Unpacking Sasser - (May 02)
    - Re: Unpacking Sasser Lee (May 02)
    - Re: Unpacking Sasser Nick FitzGerald (May 02)
    - Re: Unpacking Sasser Lee (May 03)
    - Determinig VMWare environment (was: Unpacking Sasser) Spiro Trikaliotis (May 03)
    - Re: Determinig VMWare environment (was: Unpacking Sasser) Lee (May 03)
    - Re: Unpacking Sasser Gary E. Miller (May 03)
    - Catching Sasser Shashank Rai (May 04)
- RE: Unpacking Sasser Angelaix (May 02)