Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:




fulldisclosure logo Full Disclosure mailing list archives

Re: Unpacking Sasser
From: - <dsx_news () web de>
Date: Sun, 02 May 2004 19:47:46 +0200

I would like a copy fom Sasser, too.

Thanks a lot....

Greets fom Germany...


Stupidly I was infected with Sasser last night and whilst trying to identify the program I found that the code was packed and I could find no way of idenifying the packer from the EXE (avserve.exe produced no relevant hits on Google). Could anyone tell me what unpacker to use to analyse the code? And how was this determined?

Cheers in Advance.

Tom

P.S: If anyone would like a copy of the file to look at, feel free to ask.

P.S.S: This is my first post, go easy. ;)

_________________________________________________________________
FREE pop-up blocking with the new MSN Toolbar get it now! http://toolbar.msn.com/go/onm00200415ave/direct/01/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]