From c683a3a03b48e7d6cfdace0f4433cd90ae6050b6 Mon Sep 17 00:00:00 2001 From: "SECURED.ORG" Date: Thu, 10 Aug 2017 16:03:32 -0700 Subject: [PATCH] Update re102_section6.md --- RE102/re102_section6.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/RE102/re102_section6.md b/RE102/re102_section6.md index 680cf8e..4679867 100644 --- a/RE102/re102_section6.md +++ b/RE102/re102_section6.md @@ -7,6 +7,8 @@ title: Setup # Section 6: Identifying Packing # +![alt text](https://securedorg.github.io/RE102/images/Section7_intro.gif "intro") + This section will focus on identifying a custom packing routine. Believe it or not this whole shellcode executable is a packer itself. The next several functions will reveal its algorithm, and you will be able to create a simple unpacking script. ## The Bat and Vbs Scripts ## @@ -113,4 +115,4 @@ Step through the rest until you reach a call to `sub_4031A9` at `00404C81`. You Now that you know the algorithm, you can create a unpacking script for the resource. The next page will go over the script. -[Section 5.2 <- Back](https://securedorg.github.io/RE102/section5.1) | [Next -> Section 6.1](https://securedorg.github.io/RE102/section6.1) \ No newline at end of file +[Section 5.2 <- Back](https://securedorg.github.io/RE102/section5.1) | [Next -> Section 6.1](https://securedorg.github.io/RE102/section6.1)