[Full-Disclosure] Depacting Sasser

["Aaron Gray" <angray@xxxxxxxx>]

Hi,

Looking for some help. I have sucessfull depacted Blaster, that was easy, just 
UPX decompaction. On my way to disassembling it.

I Depacted Gaobot using unpack32 a number of times to, deyoda it, then 
DePEComapct it must be older codec JCALC1 algorithm.

But cannot depact/decrypt Sasser I know it is compacted with PECompact, 
probably it newer algorithm FFCE codec.

I can grab a memory image of it but would really like a tool to depack/decrypt 
it.

So is there anything that will reverse code the newer PECompacts algorithm ?

Hope you can help,

Aaron

Sorry I do not normally trade virii, they are generally availiable on the web 
given a bit of searching.
I would trade for a depacted Sasser however.

I am purly studying the things for study only.