Packers & Unpacking

Packers

A packer is a tool that is used to compress the content of the malware.

Attackers will use packers to obfuscate the content of the malware, this makes it difficult to analyze strings.

Packers compress an executable and when executed the packed executable will be decompressed. This allows us to analyze the original executable

Tools

  • UPX

  • EXEinfo PE

Last updated