-
Restore Section Header Names
- The section header names had been erased.
- Rename the relevant sections to
UPX0andUPX1to match the original UPX convention.
-
Restore the
UPX!Magic- The
UPX!magic signature was zeroed out. - It is normally located 32 bytes before the start of the actual
UPX1section data.
- The
- Use a hex editor to write
UPX!at this location.