Pattern Converter
Convert between IDA signatures and Code Signatures (with masks) instantly. Essential tool for reverse engineering, malware analysis.
What is a Pattern Signature?
A pattern signature (also known as an array of bytes or AOB) is a unique sequence of bytes used to identify a specific function, variable, or data structure within a compiled binary executable. In reverse engineering and malware analysis, signatures are crucial because they remain relatively stable even when the software is updated or recompiled, unlike static memory addresses which change constantly.
IDA Pro vs Code Signatures
IDA Pro Format
Used primarily within the IDA Pro disassembler and many modern memory scanners (like Cheat Engine). It uses space-separated hex bytes and question marks for wildcards.
48 8B 05 ? ? ? ? 48 85 C0Code Format (C++)
Used in C++ source code for internal/external memory reading. It requires a byte array (using \x) and a separate string mask to identify wildcards.
\x48\x8B\x05\x00\x00\x00\x00
Mask: xxx????How to use the Smart Converter
- Smart Mode: Simply paste your signature. The tool will automatically detect if it's an IDA pattern or a Code pattern and convert it accordingly.
- Wildcards: The converter perfectly handles both single
?and double??wildcards in IDA patterns. - Formatting: Extra spaces, newlines, and irregular formatting are automatically cleaned up during conversion.
- Copying: Use the quick copy buttons to instantly copy the exact format you need for your source code or scanner.