Tag Archives: PE-sieve

Tutorial: unpacking executables with TinyTracer + PE-sieve

Posted on March 22, 2025 by hasherezade
See More

Covers: automatic OEP finding, reconstructing IAT, avoiding antidebugs and fixing imports broken by shims In this short blog I would like to demonstrate you how to unpack an executable with PE-sieve and Tiny Tracer. As an example, let’s use the … Continue reading →

Posted in Malware, Tools, Tutorial | Tagged , , , | Leave a comment

Application shimming vs Import Table recovery

Posted on June 27, 2019 by hasherezade

In this post I am sharing a case that I investigated recently, during the tests of my application, PE-sieve. It demonstrates how the shims applied by the operating system can disrupt Imports recovery. Continue reading →

Posted in Programming, Uncategorized | Tagged , , , , , , | 1 Comment