[EXCEPTION] EXCEPTION_ACCESS_VIOLATION

Question

[EXCEPTION] EXCEPTION_ACCESS_VIOLATION

Opened this issue 7 years ago · 7 comments

Deleted user commented 7 years ago

Apon using the program, it returns this error twice -

[EXCEPTION] EXCEPTION_ACCESS_VIOLATION

Any help?

I'm very new to reverse engineering, thanks! :)

Answer 1 · 2018-04-16T09:09:49.000Z

Can you share the sample?

Answer 2 · 2018-04-16T09:36:02.000Z

Here's the program I'm trying to debug - https://mega.nz/#!MTQnHT5S!VywIRyKWxFAkMAUmwrFFGjfZQvFgOU62yQ6pxSJVjo8

Thanks for the quick reply

Answer 3 · 2018-04-16T09:48:00.000Z

The sample is protected by Obsidium software protection system,
maybe it checks the existence of a debugger via reading PEB.BeingDebugged field or something similar and behaves differently, at this moment makin cannot detect such direct memory accesses,
or maybe that's an intended exception to detect if a debugger is there or not

Answer 4 · 2018-04-16T09:51:39.000Z

Okay thanks! Just for some help, how did you figure out it was protected by Obsidium?

Answer 5 · 2018-04-16T09:53:34.000Z

Using this tool: http://exeinfo.atwebpages.com/

Answer 6 · 2018-04-16T09:55:29.000Z

Thanks for all the help 👍 I've just started learning reverse engineering and it's all really confusing right now.

Answer 7 · 2018-04-16T09:58:09.000Z

I recommend this book: https://beginners.re/RE4B-EN.pdf for RE