Questions tagged [upx]

the Ultimate Packer for eXecutables is a free, multiplatform, open-source executables packer.

UPX allows the compression of many different executable formats. To perform the compression either the UCL or LZMA algorithems are used. When using UCL the executable can in many cases decompressed in place without additional memory use.

UPX can be used as a first line of obfuscation as the executable must be decompressed before analysis.

21 questions
15
votes
3 answers

What different UPX formats exist and how do they differ?

Recently I asked a question about detecting UPX compression. 0xC0000022L wanted to know if it was plain UPX. However until that point I only was aware of plain UPX. So my question is: What versions/modifications of UPX exist? How do they differ?…
qbi
  • 527
  • 1
  • 4
  • 16