Skip navigation.

M8Z files :)

| | |

does someone know about the "packer" that makes a MZ look like M8Z? there are some droppers and loaders that have that MZ inside.. So if you have any info or know about some tools.. I'd appreciate. Of course, it would be nice if I'd reverse it.. but .. the time is my enemy :) a sample cand be found with (but it's not "the best" sample since it obfuscated :( )


Trojan.Pakes.cdk - DNSclient.dll (exe)

looks to me as a homemade packer, do you have any more samples ? :)

AV's said its: Trojan.Pakes.cdk

Is this DNSclient static

Is this DNSclient static name?

If so,one here and quite the elusive little rascal.

yup its "hardcoded" :)

yup its "hardcoded" :)

4u http://www.offensivecomput


Most likely, it is an aPlib

Most likely, it is an aPlib compression library (free for non-commercial usage)


will look at it.
[edit] ECk you were absolutely, perfectly right. thanks a lot. I owe you one :)