/images/avatar.png

Unmapping PE files, fixing Alignment and Fixing corrupted/Missing PE Header

Hi all, Today I am writing this Post to help you fix the common problems faced while unpacking malware They are Unmapping PE files Fixing Alignment and Fixing corrupted/Missing PE Header First we will be Discussing how to Unmap PE file Unmapping PE files While Unpacking malware we dump the mapped binary into file. For proper analysis we need to convert this to an Unmapped Binary. We can make sure that the binary is mapped by looking at the raw address of first section, it will be always 1000 .