IDA rebasing behavior when debugging <-> static analysis

Hey I have problems navigating addresses because IDA is not consistent in keeping the base offset the same when you switch into debugging and back to static analysis.

Hi @bukowa,

Could you tell us if you are currently using our debugger inside IDA?

What you’re describing is expected behavior caused by ASLR, but our debugger should normally handle rebasing automatically.

I’m using the Windows Local Debugger. Don’t get me wrong — rebasing works just fine. The issue is that after debugging, I have to manually rebase again to keep the same base offset as in Ghidra, so I can easily follow the functions back and forth.

Also, I’d like to jump to the static address after the debugger is executed, so IDA can automatically calculate the dynamic offset — but I can’t find this option.

Thank you for the expanded explanation. After end of debugging, IDA does not rebase the binary back to the default imagebase in effort to speed up the subsequent debug runs (often the binary is loaded at the same address as before). However, you can still rebase it back manually by using Edit > Segments > Rebase program.

Thanks, this seems like a solid case.