Samuel Hopstock
Samuel Hopstock
No problem, if you have any further questions don't hesitate to ask them.
Without having looked into this in more detail yet, I think this isn't Windows specific but probably there is some error handling missing for 64bit binaries
Apparently the `collections.Iterable` class has been deprecated in Python 3.10, which one of our dependencies relies on. Thus unipacker doesn't support this Python version at the moment. We will investigate...
Thanks, we'll look into it 👍
On the other hand, executing an already unpacked sample a second time should not create any problems. The entry point has been switched over to the unpacked original code, so...
First you need a yara rule identifying the packer. This needs to be placed in [packer_signatures.yar](https://github.com/unipacker/unipacker/blob/master/unipacker/packer_signatures.yar). Suppose the rule is named "armadillo". Then, in [unpackers.py](https://github.com/unipacker/unipacker/blob/master/unipacker/unpackers.py), you need to create a...
Can you share the sample?
We'll look into this
So the error in the import rebuilding process seems to indicate that we are not able to find the import address table inside your sample. You could change the `self.dumper`...
Ah I see. It just came to my attention because my changes to the type system failed to run correctly due to this detached declaration 😄