PaulDotCom mailing list archives
packers....
From: netevil at hackers.it (NetEvil)
Date: Fri, 5 Feb 2010 08:31:05 +0100
Hi guys, In my pentest i have 2 binaries, the first evil and the second trusted..both undetected by AVs.. But when i pack them together...(I've tried many tools..) the resulting bin is often detected as "evil packed file.." or something like that...and this is not stealth as i would it to be... ...Then i have to work on the final bin trying to remove detected signature...but it's always painful ... Is it the only way to do it? or i am missing some undetected packer?..maybe have i to write it in my own :? Thanks in advance ...and wish you all a lot of fun at shmoocon! ;-) David
Current thread:
- packers.... NetEvil (Feb 04)
- packers.... Chris Keladis (Feb 05)
- packers.... NetEvil (Feb 05)
- packers.... Duncan Alderson (Feb 05)
- packers.... NetEvil (Feb 06)
- packers.... Robert Portvliet (Feb 07)
- packers.... Dimitrios Kapsalis (Feb 07)
- packers.... Chris Keladis (Feb 05)