<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">

<!--Converted with LaTeX2HTML 99.2beta8 (1.46)
original version by:  Nikos Drakos, CBLU, University of Leeds
* revised and updated by:  Marcus Hennecke, Ross Moore, Herb Swan
* with significant contributions from:
  Jens Lippmann, Marek Rouchal, Martin Wilck and others -->
<HTML>
<HEAD>
<TITLE>Executables</TITLE>
<META NAME="description" CONTENT="Executables">
<META NAME="keywords" CONTENT="clamdoc">
<META NAME="resource-type" CONTENT="document">
<META NAME="distribution" CONTENT="global">

<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<META NAME="Generator" CONTENT="LaTeX2HTML v99.2beta8">
<META HTTP-EQUIV="Content-Style-Type" CONTENT="text/css">

<LINK REL="STYLESHEET" HREF="clamdoc.css">

<LINK REL="next" HREF="node33.html">
<LINK REL="previous" HREF="node31.html">
<LINK REL="up" HREF="node31.html">
<LINK REL="next" HREF="node33.html">
</HEAD>

<BODY >
<!--Navigation Panel-->
<A NAME="tex2html619"
  HREF="node33.html">
<IMG WIDTH="37" HEIGHT="24" ALIGN="BOTTOM" BORDER="0" ALT="next" SRC="next.png"></A> 
<A NAME="tex2html615"
  HREF="node31.html">
<IMG WIDTH="26" HEIGHT="24" ALIGN="BOTTOM" BORDER="0" ALT="up" SRC="up.png"></A> 
<A NAME="tex2html609"
  HREF="node31.html">
<IMG WIDTH="63" HEIGHT="24" ALIGN="BOTTOM" BORDER="0" ALT="previous" SRC="prev.png"></A> 
<A NAME="tex2html617"
  HREF="node1.html">
<IMG WIDTH="65" HEIGHT="24" ALIGN="BOTTOM" BORDER="0" ALT="contents" SRC="contents.png"></A>  
<BR>
<B> Next:</B> <A NAME="tex2html620"
  HREF="node33.html">Mail files</A>
<B> Up:</B> <A NAME="tex2html616"
  HREF="node31.html">Supported formats</A>
<B> Previous:</B> <A NAME="tex2html610"
  HREF="node31.html">Supported formats</A>
 &nbsp <B>  <A NAME="tex2html618"
  HREF="node1.html">Contents</A></B> 
<BR>
<BR>
<!--End of Navigation Panel-->

<H3><A NAME="SECTION00072100000000000000">
Executables</A>
</H3>
    The library has a built-in support for 32/64-bit Portable Executable files
    and 32-bit ELF files. Additionally, it can handle PE files compressed or
    obfuscated with the following tools:
    
<UL>
<LI>UPX (all versions)
</LI>
<LI>FSG (1.3, 1.31, 1.33, 2.0)
</LI>
<LI>Petite (2.x)
</LI>
<LI>NsPack
</LI>
<LI>wwpack32 (1.20)
</LI>
<LI>MEW
</LI>
<LI>Upack
</LI>
<LI>SUE
</LI>
<LI>Y0da Cryptor (1.3)
    
</LI>
</UL>

<P>
<BR><HR>
<ADDRESS>
Tomasz Kojm
2007-07-11
</ADDRESS>
</BODY>
</HTML>