[Packer] Add ASPack/ASProtect detection #52

New Issue

claunia · 2026-01-29T21:05:24Z

claunia commented

2026-01-29 21:05:24 +00:00

Originally created by @TheRogueArchivist on GitHub (Jan 12, 2022).

Both packers are actually still around today, though the new version of ASProtect seems to referred to as ASProtect 32/64. ASProtect 2.x seems to be referred to as ASProtect SKE, with either one version in common use, or PiD's version detection lacking. ASPack still seems to be available under the same name, ASPack identification should be relatively easy, as I see "aspack" inside of the header of the samples I've seen. I haven't seen that string, nor any equivalent, in ASProtect. This makes sense, since ASPack seems to be advertised as a more budget friendly packer that doesn't have as much emphasis on security. I assume ASProtect is essentially a form of ASPack+Security, but that's just a guess.

Official site: http://www.aspack.com/
ASPack unpacker: https://gist.github.com/abhisek/3659931
ASProtect RE: https://github.com/pstolarz/asprext

Originally created by @TheRogueArchivist on GitHub (Jan 12, 2022). Both packers are actually still around today, though the new version of ASProtect seems to referred to as ASProtect 32/64. ASProtect 2.x seems to be referred to as ASProtect SKE, with either one version in common use, or PiD's version detection lacking. ASPack still seems to be available under the same name, ASPack identification should be relatively easy, as I see "aspack" inside of the header of the samples I've seen. I haven't seen that string, nor any equivalent, in ASProtect. This makes sense, since ASPack seems to be advertised as a more budget friendly packer that doesn't have as much emphasis on security. I assume ASProtect is essentially a form of ASPack+Security, but that's just a guess. Official site: http://www.aspack.com/ ASPack unpacker: https://gist.github.com/abhisek/3659931 ASProtect RE: https://github.com/pstolarz/asprext

claunia closed this issue

2026-01-29 21:05:24 +00:00

claunia commented

2026-01-29 21:05:25 +00:00

@mnadareski commented on GitHub (Jul 12, 2022):

https://unprotect.it/technique/aspack/

@mnadareski commented on GitHub (Jul 12, 2022): https://unprotect.it/technique/aspack/

claunia commented

2026-01-29 21:05:25 +00:00

@mnadareski commented on GitHub (Jul 12, 2022):

Implemented in 8fb42bc12d

@mnadareski commented on GitHub (Jul 12, 2022): Implemented in https://github.com/mnadareski/BurnOutSharp/commit/8fb42bc12d94521559c961275897ba81b64336c0

claunia referenced this issue

2026-01-29 21:07:28 +00:00

[PR #52] [MERGED] Concurrent protection scans per file #256

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: SabreTools/BinaryObjectScanner#52