1. A computer implemented method comprising: setting, by a computing device, a debugging breakpoint at an original entry point address of a packed portable executable file; executing, by the computing device, a debugging process for the packed portable executable file to obtain a debugged portable executable file in memory; collecting, by the computing device, one or more of import address table data and relocation table data during execution of the debugging process for the packed portable executable file; copying, by the computing device, the debugged portable executable file in memory to a storage medium; and terminating, by the computing device, the debugging process.