Alex Rivera | Logout

Is it possible to "decompile" a Windows .exe? Or at least view the Assembly?

Asked 2008-11-07T18:44:47.240
337

A friend of mine downloaded some malware from Facebook, and I'm curious to see what it does without infecting myself. I know that you can't really decompile an .exe, but can I at least view it in Assembly or attach a debugger?

Edit to say it is not a .NET executable, no CLI header.

debugging winapi assembly decompiling
Edit
Report

2 Answers

6

Sure, have a look at IDA Pro. They offer an eval version so you can try it out.

answered 2008-11-07T18:49:58.243
3

If you want to run the program to see what it does without infecting your computer, use with a virtual machine like VMWare or Microsoft VPC, or a program that can sandbox the program like SandboxIE

answered 2008-11-07T21:12:36.240

Your Answer