Problem unpacking a Morphined .exe

Originally Posted by lordnasty

Thanks,
the problem is that i want to understand how to fix the original Image Base and the size .
NaSTy

Morphine packs all data file inside ".text" section. Try to find this file data inside ".text" section after passing second decrypting loop and find original PE header, then create your custom PE header according to its.

Originally Posted by lordnasty

Thanks,
Also why the Morphine can encrypt one file several times.
NaSTy

It use polymorphism encryption that cause to face every time different ways.