File unshelling method and device

A file and file format technology, applied in computer security devices, instruments, calculations, etc., can solve problems such as long time-consuming, manual unpacking is no longer applicable, and heavy research and development workload, so as to reduce unpacking time and save research and development time Effect

Pending Publication Date: 2021-12-17
TENCENT TECH (SHENZHEN) CO LTD
View PDF0 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0004] Manual unpacking can be performed for different packers, but if security analysts need to unpack a large number of packers, it will take a long time, and manual unpacking is no longer applicable
[0005] Automatic unpacking is to use the unpacking machine to automatically unpack the packer. However, different software or even different versions of the shell have different unpacking methods. Therefore, different unpacking machines need to be developed for different versions of the shell. lead to heavy research and development

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • File unshelling method and device
  • File unshelling method and device
  • File unshelling method and device

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0063] The technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the drawings in the embodiments of the present application. Obviously, the described embodiments are only a part of the embodiments of the present application, but not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by those skilled in the art without creative work fall within the protection scope of the present application.

[0064] In the description of the embodiments of the present application, it should be understood that the terms "first" and "second" are used to distinguish different objects, and cannot be understood as indicating or implying relative importance or implicitly indicating the indicated technical features. quantity. Features delimited with "first", "second" may expressly or implicitly include one or more of the stated features, rather than describing a parti...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The embodiment of the invention discloses a file unshelling method and device. The file unshelling method comprises the following steps: acquiring a first shelled file in a first file format; loading the first packed file into a memory space of a preset simulation execution engine to obtain a first simulation execution file of the first packed file; executing the first simulation execution file through a simulation execution engine, and obtaining a first memory mapping file of the first simulation execution file, wherein the simulation execution engine can execute files of file formats of multiple platforms; obtaining a first memory mapping file, and taking the first memory mapping file as a first target file of the first packed file, wherein the first target file refers to a file obtained after the first shelled file is unshelled. According to the embodiment of the invention, automatic unshelling can be carried out for different types of shelled files, so that a large number of unshelling machines do not need to be researched and developed for different types of shelled files.

Description

technical field [0001] The embodiments of the present application relate to the technical field of software, and in particular, to a file unpacking method and device. Background technique [0002] Packing is to use a special algorithm to compress the resources in the executable file. The packaged program can be run directly, but the source code cannot be viewed, and the source code can be viewed only after unpacking. Generally speaking, the purpose of program packer is to prevent the disassembly or dynamic analysis of the packer itself by external programs or software, so as to protect the original program and software in the shell from being damaged by the external program and ensure the normal operation of the original program. [0003] However, with the rapid development of the Internet, some malicious programs also use the packing technology, which makes it difficult for security analysts to successfully identify malicious programs. Therefore, in the prior art, there a...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Applications(China)
IPC IPC(8): G06F21/56
CPCG06F21/563G06F2221/033
Inventor 李仕昌罗聪
Owner TENCENT TECH (SHENZHEN) CO LTD
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic.

© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap