Skip to content
0:00 / 0:00

#upx#x64dbg#scylla

Unpacking Modified UPX: DvdShrink Case Study (OEP Discovery & Manual Dump)

Kadir&Mira

28 subscribers • 1 video on Hallway

YouTube
  • Recommended by 1 person: 1 in engineering communities.

Intermediate. Assumes working knowledge.

399 views8 months ago1 recommendation

SecurityReverse engineeringExploits and vulnerabilities

A quick walkthrough demonstrating how to locate the original entry point and manually unpack a modified UPX packer using x64dbg and Scylla.

In this video, I demonstrate a straightforward approach to unpacking a modified version of the UPX packer found in DvdShrink. This variant requires specific attention to the Original Entry Point (OEP) and header reconstruction. Key Technical Steps: - Identifying modified UPX headers. - Locating the OEP (Original Entry Point). - Manual dumping and IAT fixing. Tools used: x64dbg, Scylla. This is a part of my ongoing reverse engineering series. Feel free to ask questions in the comments! #ReverseEngineering #MalwareAnalysis #UPX #Unpacking #DvdShrink #CyberSecurity

Why it's here

1 person recommends this

What people say. Recommended as a concise guide to manual unpacking and fixing the import address table of a modified UPX binary.

u/AcizBirKulKadirin r/ReverseEngineering • Recommends

Dealing with a modified UPX variant in DvdShrink - Quick Unpacking Walkthrough