09-14-2006, 21:32
|
|
Friend
|
|
Join Date: Aug 2003
Posts: 82
Rept. Given: 0
Rept. Rcvd 0 Times in 0 Posts
Thanks Given: 1
Thanks Rcvd at 1 Time in 1 Post
|
|
Quote:
|
Originally Posted by 5Alive
I cannot manually apply FLIRT signatures as I don't have a FLIRT library for Delphi Client/Server Enterprise. Do you know where I can find this? I can't attach to the process with DeDe either, I was wondering if there is anyway to fix this problem?
I've tested the program through normal use and it runs well so I don't think that it has any crypted code blocks remaining.
I'm only basing my assumption that it is packed with ASPR1.3x based on what PEiD reports (1.2x- 1.3x). Stud_PE reports 1.2x[new strain] (I think I may need to update signature library for this).
Okay, So I could identify the vesion of ASP by checking what crypto algo is used in the registration scheme. How else can I reliably identify the version of ASPR used?
Thanks for your help.
|
|
Similar Threads
Hybrid Mode
