I provided only one path, but in some cases there are many, so you may need to do a homework if you want more samples. These are PE sections extracted from the demoscene corpora some of them use a name that is clearly associated with a respective demo group some are variations of well-known pe sections and we can guess their meaning, some are clearly one-offs I have provided the section name, some quick comment, if applicable, and a relative path on the where you can find sample of a PE file using a described section. WinLicen – WinLicense (Themida) Protector.PECompact2 – PECompact packer (not a section name, but a good identifier).mnbvcx2 – most likely associated with Firseria PUP downloaders
mnbvcx1 – most likely associated with Firseria PUP downloaders imrsiv – special section used for applications that can be loaded to OS desktop bands. FSG! – FSG packer (not a section name, but a good identifier).boom – The Boomerang List Builder (config+exe xored with a single byte key 0x77) The packer/protector/tools section names/keywords This is the latest version of the list (note that there are duplicates, if treated as case-insensitive): Update: This list has been last updated on 7th of January 2017Ĥ years back I published a list of PE section names I recently thought of revisiting the list and as a result added a lot more entries. Added sections from demoscene files additional protectors, and many others big update in generalĪdded.
0 kommentar(er)
