avast / avast/retdec

Unpacker creates much bigger binaries than the inputs (2.5 MB to 145 MB)

Open
#167 0 comments 0 reactions 0 assignees View on GitHub
C-unpacker P-output
Dominant language
C++
Stars
8.6k
Forks
1k
PR merge metrics
No merged PRs in 30d

Description

Analyze why unpacking of the following files produces files much bigger than the files themselves:
- [86b2dd826cd266432a537e9a7ac45852ab50c5596ef62476cd788fa975c83552](https://www.virustotal.com/en/file/86b2dd826cd266432a537e9a7ac45852ab50c5596ef62476cd788fa975c83552/analysis/)
- [35ea2f47d2e4756c87be88cea7653015eaa6cb8eb2ae4e28fd65606359e64f52](https://www.virustotal.com/en/file/35ea2f47d2e4756c87be88cea7653015eaa6cb8eb2ae4e28fd65606359e64f52/analysis/)

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by obtaining and reproducing the unpacking results for the two VirusTotal samples linked in the issue. Trace the unpacking path that produces the 2.5 MB to 145 MB size increase, compare the output with the inputs, and document the responsible behavior and what result should be considered fixed.

Written by the indexing model from the issue text.

Assessment

Tech stack
cpp
Domain
reverse-engineering
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
28/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.