Forum Thread: Find OEP After Infection

Find OEP After Infection

Hey people of this world,
I've created a virus, now i'm trying to create the anti virus,

i want to calculate the Original Entry Point, i saw that in every exe, the EP always point to .text, my problem is : the OEP dont always point to the virtuel address of the .text, for example:

1000h ...
1002h ...
1004h ...
.
.
10A0h ..."Entry Point, points here"
how can i calculate that? i'm really stuck

Be the First to Respond

Share Your Thoughts

  • Hot
  • Active