lcashdol / UPX

A utility to fix intentionally corrupted UPX packed files.

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

UPX Fixer

Some C code to repair corrupt p_info header on UPX! packed malware. It fixes two variants I found that were pretty common. There are many other variants that have UPX headers either stripped, or null bytes injected to change offsets that this code does not work on.

$ make
make 	upx_dec	
make[1]: Entering directory '/home/larry/code/UPX'
gcc -Wall -ggdb -O2 -D DEBUG=0    -c -o upx_dec.o upx_dec.c
gcc -O2 -o upx_dec upx_dec.o
make[1]: Leaving directory '/home/larry/code/UPX'

alt text

About

A utility to fix intentionally corrupted UPX packed files.

License:Apache License 2.0


Languages

Language:C 57.0%Language:Python 41.5%Language:Makefile 1.5%