adplus-dvertising
frame-decoration

Question

How can the automatic unpacking of executables be prevented?

a.

By using separate hardware that stores the decryption key

b.

By hiding the key within the program

c.

By using a complex encryption algorithm

d.

By compressing the program code

Posted under Reverse Engineering

Answer: (b).By hiding the key within the program Explanation:The only way to fight the automatic unpacking of executables is to try and hide the key within the program. One effective tactic is to use a key that is calculated in runtime, inside the program.

Engage with the Community - Add Your Comment

Confused About the Answer? Ask for Details Here.

Know the Explanation? Add it Here.

Q. How can the automatic unpacking of executables be prevented?

Similar Questions

Discover Related MCQs

Q. Why is it sometimes beneficial to incorporate special code in a program that prevents or complicates the process of stepping through the program and placing breakpoints in it?

Q. When is combining antidebugger techniques with code encryption particularly effective?

Q. Can it be possible to automatically unpack encrypted executables?

Q. Are antidebugger tricks generally platform-specific?

Q. Are antidebugger tricks without risks?

Q. What is the difference between code encryption and code obfuscation?

Q. Which of the following is not true about antidebugger tricks?

Q. Why are antidebugger tricks risky?

Q. How can code encryption be used in conjunction with antidebugger techniques?

Q. Which operating systems are antidebugger tricks reasonably effective and compatible with?

Q. What is the int 3 instruction used for in debugging?

Q. What is a hardware breakpoint?

Q. How is single-stepping implemented on IA-32 processors?

Q. What is the purpose of incorporating antidebugger techniques in a program?

Q. How are breakpoints usually set in a program by a debugger?

Q. How do hardware breakpoints differ from software breakpoints?

Q. What is the single-step interrupt?

Q. What is IsDebuggerPresent API?

Q. What does IsDebuggerPresent API access to determine whether a user-mode debugger is attached?

Q. Why is directly calling IsDebuggerPresent not effective against reversers?