avast / avast/retdec

UPX unpacker: "Invalid block found" while unpacking UPXed ELF file

Open
#413 2 comments 0 reactions 1 assignee Claimed by @metthal View on GitHub
C-unpacker enhancement P-run
Dominant language
C++
Stars
8.6k
Forks
1k
PR merge metrics
No merged PRs in 30d

Description

Hi,

I'm trying to unpack x64 ELF file with SHA256 hash `f723f0a1e6910023b3f9a3bd2f0ae35f751a00c86c08819d2dc7b33b5bb2bc7f` by using the retdec-unpacker, but I only get:

```
[UPX] Detected NRV2E unpacking stub based on signature & metadata.
[UPX] Started unpacking of file 'SAMPLE'.
[UPX] Unfiltering filter 0x0 with parameter 0.
[UPX] Unpacking block at file offset 0x1c4.
[UPX] Unfiltering filter 0x49 with parameter 67.
[UPX] Unpacking block at file offset 0x9a85f.
[ERROR] [UPX] Invalid block found.
```
Could you, please modify the unpacked if it is unpackable?

IMHO @thinkcz was able to unpack it by using the latest UPX for Linux, but I'm getting `compressed data violation` with upx 3.95.

Thank you!

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.