January 05, 2006

Cool tool for packed executables

I have been playing with a cool tool to detect which packer an executable is packed with. It is PEID. It uses signatures to determine which packer has been used, and if there is not a signature, you can add one of your own.

It also does some generic measurements of whether executables are packed.