[IDA] How do I search for a sequence of bytes in code?

[fvicaria]

Hi guys,
I am quite new to IDA and I am trying to learn some basic actions but facing some difficulties...

How do I search for a sequence of bytes in the code segment? I tried binary search but it doesn't seem to work?
Can anybody give a quick hand?

I have seen posts on patter maker etc but not sure if and how I could apply it here.


I also got the IDA Book so hopefully it will get easier.


I would really appreciate any pointers on this.

Thanks a lot.

[namreeb]

Search menu -> Sequence of bytes

The feature is very well documented in IDA help.

[TOM_RUS]

Also can be done easily from IDC scripts
Example:

addr = FindBinary(0, SEARCH_DOWN, "55 8B EC 6A FF 68 ? ? ? ? 64 A1 00 00 00 00 50 83 EC 38 A1 ? ?");

[fvicaria]

Thanks guys.

I did some homework on the subject and came up with this:
http://www.ownedcore.com/forums/worl...earch-ida.html (How to make signature and search with IDA)

It was mainly for my own benefit but it may help somebody else also.

[Nesox]

"Search -> Sequence of bytes" or "Alt+B" when ure in IDA View-A or Hex View-A