Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

App crashing on specific exe #21

Open
greenozon opened this issue Oct 27, 2024 · 1 comment
Open

App crashing on specific exe #21

greenozon opened this issue Oct 27, 2024 · 1 comment

Comments

@greenozon
Copy link

Found out very tricky PE64 binary

it has lots of surprizes!
eg:
on d-n-d event:
image

Directories??!

image

it CRASHES on clicking Entropy button
image

image

file (no virus no malware, just a very nice digital clock)
Clock7.zip

@upiter
Copy link
Collaborator

upiter commented Dec 4, 2024

@greenozon Alex, there are some issues with your file Clock7.exe file that make it different from the ordinal executable:

  1. PE header is located inside DOS header (at 0x10), so it's not allowed to edit DOS header (it's already optimised to contain PE header, so editing it will corrupt both headers).

  2. File doesn't contain any Directory, NumberOfRvaAndSizes = 0.

  3. File is encrypted with simple algo (rol/ror/xor).

  4. Code is compressed using aPLib compression library.

Anyway there is a bug in Entropy calculation code.

Repository owner deleted a comment from somk Dec 4, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants