Packed Away

Personal Rating: Easy

strings returns this: Hr3t_0f_th3_p45}

string search in ghidra finds this:

5w0rdogreen

Using strings packed and ghidra, I found out that the executable was packed with UPX:

I downloaded upx and unpacked the file with upx -d packed

Then I could read the flag with strings:

After the file has been unpacked, you can also find the flag in the function "entered"