Foreigner
October 7th, 2004, 03:52
I am working on a target and I have some problems to apply an ida signature.
The file was packed, I unpacked the target and I used imprec to rebuild the iat. After that, I opened the file with ida and when the autoanalysis is finished I tried to apply miracl signature but Ida is not able to recognize a single reference. This is strange because I can see all miracle's functions inside the exe, I mean mirvar, powmod, ...
Is it possible that Ida is not able to apply signature on unpacked programs? Do I have to change something in the unpacked file, or is it my unpacked file wrong (even if it runs fine)?
Thanks in advance.
foreigner
The file was packed, I unpacked the target and I used imprec to rebuild the iat. After that, I opened the file with ida and when the autoanalysis is finished I tried to apply miracl signature but Ida is not able to recognize a single reference. This is strange because I can see all miracle's functions inside the exe, I mean mirvar, powmod, ...
Is it possible that Ida is not able to apply signature on unpacked programs? Do I have to change something in the unpacked file, or is it my unpacked file wrong (even if it runs fine)?
Thanks in advance.
foreigner