Full Disclosure: Depacting Sasser

["Aaron Gray" <angray () beeb net>]

Hi,

Looking for some help. I have sucessfull depacted Blaster, that was easy, just UPX decompaction. On my way to 
disassembling it.

I Depacted Gaobot using unpack32 a number of times to, deyoda it, then DePEComapct it must be older codec JCALC1 
algorithm.

But cannot depact/decrypt Sasser I know it is compacted with PECompact, probably it newer algorithm FFCE codec.

I can grab a memory image of it but would really like a tool to depack/decrypt it.

So is there anything that will reverse code the newer PECompacts algorithm ?

Hope you can help,

Aaron

Sorry I do not normally trade virii, they are generally availiable on the web given a bit of searching.
I would trade for a depacted Sasser however.

I am purly studying the things for study only.