lecture: Breaking password protected PE files

Event_large

In the world of custom crypters, it is not uncommon to stumble upon custom encryption algorithms used for password encryption of PE executables. Many authors of these crypters do not have background in cryptography so their attempts to create simple and lightweight custom encryption result in creating flawed encryptions. PE Password Protector’s encryption algorithm is indeed broken – it is not resistant to known plaintext attack. Due to this, we can decrypt any file protected with PE Password Protector and inspect its contents.

Info

Day: 2015-09-15
Start time: 17:00
Duration: 00:30
Room: Room 1 - FOI

Language: en

Links:

Feedback

Click here to let us know how you liked this event.

Concurrent events