lecture: Breaking password protected PE files
In the world of custom crypters, it is not uncommon to stumble upon custom encryption algorithms used for password encryption of PE executables. Many authors of these crypters do not have background in cryptography so their attempts to create simple and lightweight custom encryption result in creating flawed encryptions. PE Password Protector’s encryption algorithm is indeed broken – it is not resistant to known plaintext attack. Due to this, we can decrypt any file protected with PE Password Protector and inspect its contents.
Info
Day:
2015-09-15
Start time:
17:00
Duration:
00:30
Room:
Room 1 - FOI
Language:
en
Links:
Feedback
Click here to let us know how you liked this event.
Concurrent events
Speakers
Katja Malvoni |