Thread: How to develop an unpacker - The StarForce case
View Single Post
  #1  
Old 04-12-2017, 23:51
elephant elephant is offline
Friend
  
Join Date: Feb 2005
Posts: 89
Rept. Given: 2
Rept. Rcvd 26 Times in 13 Posts
Thanks Given: 130
Thanks Rcvd at 107 Times in 37 Posts
elephant Reputation: 26
Post How to develop an unpacker - The StarForce case
Very cool presentation, published on the 7th April 2017 by Eloi Vanderbeken at the Sthack security conference in Bordeaux, about unpacking StarForce:

http://www.synacktiv.ninja/ressource..._synacktiv.pdf

This unpacker is based on DLL injection and take care of recovering the OEP, API redirection, stolen bytes, debugger detection and hide from debugger routines.
Reply With Quote
The Following User Says Thank You to elephant For This Useful Post:
besoeso (04-13-2017)