Skip to content
0:00 / 0:00

#x64dbg#peformat#pe-bear

Malware Samples Crashing x64dbg Fixed!

OALabs

52K subscribers • 40 videos on Hallway

YouTube
  • Recommended by 1 person: 1 in engineering communities.
  • Linked in the descriptioncorkami/picshasherezade/pe-bear-releases
  • May be out of date. The tools, versions or practices it shows have likely moved on.

Intermediate. Assumes working knowledge.

7.7K views7 years ago1 recommendation

SecurityTools and practiceDebuggingReverse engineering

This video explains why certain malware samples crashed older versions of x64dbg by exploiting PE file header parsing and how the fix works.

We dive into why some recent malware samples have been crashing in x64dbg. Expand for more... ----- OALABS DISCORD discord.gg/6h5Bh5AMDU OALABS PATREON patreon.com/oalabs OALABS TIP JAR ko-fi.com/oalabs OALABS GITHUB github.com/OALabs UNPACME - AUTOMATED MALWARE UNPACKING unpac.me/#/ ----- Example (Vidar) sent from subscriber packed with packer that crashes old versions of x64dbg : 7b2c480736bc2ea3c6e064077e78c6a0acabbd83d0e4e637673c9deb966296d5 Download x64dbg (with fix for crash): x64dbg.com/#start Donate to x64dbg: bountysource.com/teams/x64dbg Corkami PE file map: github.com/corkami/pics/tree/master/binary/pe102 MSDN PE file documentation: docs.microsoft.com/en-us/windows/desktop/debug/pe-format#exp… PE Bear download: github.com/hasherezade/pe-bear-releases/releases/tag/0.3.9.5 Feedback, questions, and suggestions are always welcome : ) Sergei twitter.com/herrcore Sean twitter.com/seanmw As always check out our tools, tutorials, and more content over at openanalysis.net #x64dbg #MalwareAnalysis #Tutorial #OpenAnalysis

Why it's here

1 person recommends this

u/herrcorein r/ReverseEngineering • Recommends

Malware Samples Crashing x64dbg Fixed! (OALabs Tutorial)