Exetools  

Go Back   Exetools > General > General Discussion

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 01-28-2005, 23:38
Hero Hero is offline
VIP
 
Join Date: Jan 2005
Posts: 226
Rept. Given: 2
Rept. Rcvd 1 Time in 1 Post
Thanks Given: 5
Thanks Rcvd at 2 Times in 2 Posts
Hero Reputation: 1
Quote:
I'm tryining to find the versione of the armadillo used in the following app
Normaly the simplest way to find a program packers name and version is using
programs such as PEid or trId.This programs show you the packer name and its
version.

sincerely yours
__________________
I should look out my posts,or JMI gets mad on me!
Reply With Quote
  #2  
Old 01-29-2005, 00:32
Eggi
 
Posts: n/a
thats not true for armadillo.... peid says armadillo 3.78 if it uses the layer from the adata section as ep (ep is a pushad then)

but if a author uses minimum protection it will have a push ebp at the ep and so peid will identify it as 1.x - 2.x also if its a newer version...
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Strange Crash in Armadilled Program TmC General Discussion 4 06-03-2006 21:08
Armadilled Programs with Custom Implementation TmC General Discussion 3 05-15-2006 08:58
Setup Factory 7.0.2.0 De-Armadilled Problem TmC General Discussion 3 05-07-2005 23:02


All times are GMT +8. The time now is 03:19.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )