Executable installers are defective^WEVIL (case 2): innosetup-5.5.9.exe and innosetup-5.5.9-unicode.exe

Posted by Stefan Kanthak on Mar 06

Hi @ll,

InnoSetup is BROKEN, it creates DEFECTIVE “portable executable”
image files, for example innosetup-5.5.9.exe itself.

JFTR: unfortunately Windows’ module loader covers these bugs and
loads such defective PE image files.

DEFECTS:
~~~~~~~~

1. all (8) IMAGE_IMPORT_DESCRIPTOR entries in the IMPORT directory
are INVALID: their Characteristics/OriginalFirstThunk fields
contain 0 instead of the RVA of the import…

Leave a Reply