GView icon indicating copy to clipboard operation
GView copied to clipboard

Published 20 hours ago • verified publisher icon gdt050579

[ELF][UPX] Unpack ELF binaries packed with UPX

Open gheorghitamutu opened this issue 1 year ago • 0 comments

ELF UPXed binaries seem to have no sections (only segments). https://blogs.jpcert.or.jp/en/2023/05/gobrat.html

eg. 2c1566a2e03c63b67fbdd80b4a67535e9ed969ea3e3013f0ba503cfa58e287e3 (malicious)

gheorghitamutu avatar May 30 '23 09:05 gheorghitamutu