In this blog, we share a tool (available on Git Hub) that can automatically fix various types of tampered UPX-packed files so that they become easily unpackable using standard UPX functionality. This first version of the tool focuses on handling Executable and Linkable Format (ELF) files compiled for various popular Reduced Instruction Set Computer (RISC) architectures commonly used by IoT devices, namely x86, x86-64, PowerPC, ARM, and MIPS. We will then evaluate its efficacy by using a set of samples collected using our global chain of IoT honeypots.
The post Automatic Restoration of Corrupted UPX-packed Samples appeared first on Nozomi Networks.
The post Automatic Restoration of Corrupted UPX-packed Samples appeared first on Security Boulevard.
Leer másSecurity Boulevard
