UnPackMe

414 topics in this forum

1. 

   [Unpack/DecompileMe] little .pyc, why are you so weird?

   August 23, 2015 by bomblader

   • 14 replies
   • 13.3k views

   Here you go... have fun! You can use it like this: name.pyc <password> dec.rar

   

   Last reply by Extreme Coders, May 11, 2016

   • 
2. 

   Borland Confuser v1.0

   March 24, 2016 by Modify

   • 8 replies
   • 6.5k views

   Difficulty : 3 Language : Borland Platform : Windows OS Version : Windows 7 Packer / Protector : Confuser, DNP Method Description : Hi, Don't trust public version packer finder. Good Luck thanks Screenshot : Demo.7z

   

   Last reply by cob_258, April 2, 2016

   • 
3. 

   Enigma Protector 5.xx

   March 13, 2016 by Modify

   • 1 reply
   • 13.7k views

   Difficulty : 4 and up Language : Borland Platform : Windows x86 OS Version : Windows Xp and up Packer / Protector : Enigma 5.xx latest version Description : UnPackMe and CrackMe I'm not share full version protect, this is protect with demo with all advance options. Good Luck Thanks Screenshot : Demo.7z License.reg

   

   Last reply by SHADOW_UA, March 16, 2016

   • 
4. 

   Private Exe Protector 5.0.1.0 Demo

   February 3, 2016 by Modify

   • 8 replies
   • 10.7k views

   Difficulty : 1 Language : Borland Platform : Windows OS Version : Windows 7 Packer / Protector : Private Exe Protector 5.0.1.0 Demo Description : 1. Unpack and crack. 2. Remove nag please tell me. Screenshot : UnPackMe.7z

   

   Last reply by Modify, March 10, 2016

   • 
5. 

   Unknown Protection v1.0

   February 25, 2016 by Modify

   • 1 reply
   • 13.1k views

   Difficulty : 3 I'm not decide Language : AutoIt3 Platform : Windows 32 bit OS Version : Windows 7 Packer / Protector : Unknown + modify Description : Don't patch. Welcome tutorial. Screenshot : UnPackMe.7z

   

   Last reply by kao, February 25, 2016

   • 
6. 

   Multiple Protection v1.0

   January 23, 2016 by Modify

   • 4 replies
   • 7.4k views

   Difficulty : 5 Language : Borland Platform : Windows OS Version : Windows 7 Packer / Protector : Themida 2.3.2.0, Enigma 3.80 Description : Simple modify section, import table Screenshot : UnPackMeDemo.7z

   

   Last reply by GIV, February 18, 2016

   • 
7. 

   [DevirtualizeMe] Themida 2.3.5.0 Full

   September 4, 2015 by HellSpider

   • 14 replies
   • 21.7k views

   Hi. My DevirtualizeMe series continue with this entry. I have protected a simple file containing 18 keyboard initiated functions with different virtual machines using a full version of Themida 2.3.5.0 . The file does not have any extra protection as the idea of this challenge is to understand the virtual machines. Also non-virtual machine protection settings are kept to a minimum, meaning no antidebug, no API redirection etc. Basically only antidump is enabled on top of the virtual machines. All of the virtual machine code blocks are identical in sense of instructions. List of function initiators: q = FISH32 White w = FISH32 Red e = FISH32 Bla…

   

   Last reply by Sound, December 29, 2015

   • 
8. 

   [CrackMe/Unpackme]Enigma 4.xx

   December 22, 2015 by danmz

   • 7 replies
   • 8.3k views

   Detail : http://prntscr.com/9hav19 Good Luck Salam. CrackMe.rar

   

   Last reply by permana, December 29, 2015

   • 
9. 

   [DevirtualizeMe/CrackMe] Oreans Code Virtualizer 2.1.5.0

   December 15, 2015 by Reasen

   • 5 replies
   • 11.4k views

   Simple DevirtualizeMe Created in Oreans Code Virtualizer V2.1.5.0 With attach some files protected by different Modes from Virtual Machine PumaWhite32, all Delphi 7 Compressed and StealthMode have Virtualized strings, the other not. Good luck. StealthModePumaWhite.rar CompressedPumaWhite.rar PumaWhite.rar

   

   Last reply by koolk, December 22, 2015
10. 

    [Unpackme/Crackme]Armadillo

    December 18, 2015 by mcr65

    • 6 replies
    • 8.4k views

    hi please unpacked and cracked this file without serial number and make tutorial thanks. Test1.rar pass: 1234

    

    Last reply by m0h1991m0h, December 19, 2015

    • 
11. 

    [Unpackme/Crackme] file from a ctf

    December 5, 2015 by bomblader

    • 3 replies
    • 5.8k views

    I thought you'll like this little challenge I encoutered during a ctf. puzz.rar

    

    Last reply by kao, December 5, 2015

    • 
12. 

    [UnpackMe] Unpack Me packed by ZProtect and UPX

    November 27, 2015 by GautamGreat

    • 1 follower
    • 7 replies
    • 12.2k views

    This unpack me is packed by Double Layer First Layer is UPX Second Layer is ZProtect with HWID Try it. BEST OF LUCK UnpackMe.rar

    

    Last reply by GIV, December 3, 2015

    • 
13. 

    [DeVirtualizeMe] VMProtect V2.13.5 DeVirtualizeMe

    November 4, 2015 by GautamGreat

    • 1 reply
    • 7.9k views

    Simple DevirtualizeMe Created in VMProtect V2.13.5 Only one Procedure Virtualized DeVirtualized Procedure VA : 004520DC DevirtualizeMe.vmp.rar

    

    Last reply by xSRTsect, November 4, 2015
14. 

    [UnpackMe] Jar2Exe v2.1

    December 11, 2014 by CodeExplorer

    • 14 replies
    • 15.1k views

    [unpackMe] Jar2Exe v2.1The purpose is unpacking. If you can unpack this write a tutorial. Jar2ExeUnpackMe.zip

    

    Last reply by CodeExplorer, October 14, 2015

    • 
15. 

    [DeObfuscateMe] Simple Builder

    October 5, 2015 by 0xNOP

    • 0 replies
    • 7.3k views

    Nothing fancy for the app, is a concept to those builders people use in Malware/Server Generators, The Stub is currently missing but you can use literally anything as the Stub xD Just pick any executable, copy it to the builder directory and rename the file to "Stub.exe" it should work as expected. Simple DeObfuscateMe - AznObfuscator Custom (ConfuserEx) For me it's very difficult to deob, If you can do this, then you are all f!@# gods xD Tried everything: Dumping -> Leaves Crashing app, Tried Fixing it, Failed... Used CC tools, None worked. Using UnConfuserEx Seems to work, but leaves app crashing -> Tried Fixing and still crashes... …

    

    Last reply by 0xNOP, October 5, 2015
16. 

    [DevirtualizeMe] Oreans Virtualizer

    June 28, 2015 by Pancake

    • 10 replies
    • 9.8k views

    Updated 30/6 Inspired by HellSpider's topic i upload a simple unvirtualizeme protected with latest licensed Oreans Code Virtualizer, for research purposes. It supports 4 types of VMs, each can be "white" , "red" or "black" (small, bigger, biggest). Pressing buttons 1-4 will pop up 2 messageboxes. Source: int Func1(int a, int b, int c){ VIRTUALIZER_FISH_RED_START MessageBoxA(0, "Fish Red", "UnvirtualizeMe", 0); Sleep((a + b + c) % 1000); MessageBoxA(0, "Complexity 2/10 Speed 9/10 Size 260", "Fish Red", 0); return GetTickCount(); VIRTUALIZER_FISH_RED_END }void* Func2(int* a, int* b, int* c){ VIRTUALIZER_PUMA_BLACK_START MessageBoxA(0,…

    

    Last reply by r00t_H@ck3r, August 1, 2015

    • 
17. 

    [UnPackMe] Armadillo 9.64 32-bit

    April 23, 2014 by SmilingWolf

    • 1 follower
    • 21 replies
    • 17.3k views

    Hello everybody! Today I would like to present you all an unpackme protected with the latest version of SoftwarePassport/Armadillo. This one is one of the most complete Armadillo unpackmes ever made, implementing almost everything Arma puts in the hands of the user ranging from the simple "Protect with password" to the nanomites, the code splices and everything in between. I have tried not to make it too easy for you all, just take a look at it The final goal is to manually unpack it, study it and show you have been able to read the first file you see when opening the password protected archive attached to this post (Mistery.7z). Enjoy! Unpackme.7z Mi…

    

    Last reply by Apuromafo, July 8, 2015

    • 
18. 

    [unpackme] UnpackMe VMP Ultimate v2.13.5

    November 29, 2013 by Kido

    • 16 replies
    • 20.7k views

    This is a simple UnpackMe using VMProtect Ultimate v2.13.5. I also used vmp's licensing system in this UnackMe, and locked one function with key. I have provided 3 different keys for this bin. A blocked key ,a valid key locked with a hwid(which i suppose no one has th same hwid) and an expire key. I also added 2 anti-debug thread to this file. Using VMProtectIsDebuggerPresent(if you have sod, i guess you can bypass this one pretty easy) and VMProtectIsValidImageCRC(crc). Didn't use VMProtectDecryptString feature. Several things I expect from this UM: Simply unpack it. Bypass the blacklist key. Bypass the expired situation. Patch hwid. Better create a …

    

    Last reply by adelynn, May 28, 2015

    • 
19. 

    [UnpackMe] Enigma Protector 3.100

    December 17, 2013 by HellSpider

    • 13 replies
    • 9.3k views

    Hi. Attached an unpackme protected by Enigma Protector 3.100 - Build 20121010 . The unpackme is coded in MASM. unpackme_enigma_3.100.rar

    

    Last reply by icarusdc, May 15, 2015

    • 
20. 

    [CrackMe/UnpackMe] Enigma 4.20++

    April 24, 2015 by Unc3nZureD

    • 4 replies
    • 8.6k views

    Hi guys, here's a quite simple crackme and packed with enigma. Let's see if you can unpack it & crack it The "License scheme" Is very simple and only contains numbers. The goal is not to write the License denied message, but the other one Why is it ++? Because I tried to use Enigma as deep as possible I used markers, vm and some more. There are a few stuff which I couldn't figure out how to use, but I think it should be harder than simply unpacking an enigma. Link to download: http://ge.tt/1nlum7F2/v/0?c Good luck guys. Edit: Added file to the post Modified description a bit EnigmaCrackMe_protected.7z

    

    Last reply by Unc3nZureD, April 27, 2015

    • 
21. 

    [unpack] Unpack PEncrypt 4.0 Protector

    April 14, 2015 by Security.IRAQ

    • 1 follower
    • 6 replies
    • 11.4k views

    Hi , Unpack The PEncrypt 4.0 Protector Youtube https://www.youtube.com/watch?v=pV7d9Rec-2M Tool : gunpacker GUnPacker.rar

    

    Last reply by NightBaron, April 19, 2015

    • 
22. 

    [UnpackMe] Enigma 4.00

    March 7, 2014 by Softgate

    • 13 replies
    • 17.5k views

    Protection setting is described in the readme. Enigma400Unpackme.rar

    

    Last reply by GIV, March 9, 2015

    • 
23. 

    [unpackme] UnpackMe Enigma 4.10 maximum protection + HWID

    June 7, 2014 by converse

    • 1 follower
    • 12 replies
    • 11.8k views

    UnpackMe Enigma 4.10 (maximum protection) + registration dialog (HWID) UnpackMe Enigma 4.10 (maximum protection).rar UnpackMe Enigma 4.10 (maximum protection+HWID).rar

    

    Last reply by GIV, March 9, 2015

    • 
24. 

    [UnpackMe] Themida 2.3.1.0

    August 9, 2014 by Arting

    • 5 replies
    • 7.5k views

    This target is protected with Themida 2.3.1.0 Virtualize Protection Core With: TIGER32 (Black) Good luck! UnpackMe Themida 2.3.1.0.rar

    

    Last reply by GIV, March 5, 2015

    • 
25. 

    [unpackme] UnPackMe

    February 27, 2015 by zelda

    • 3 replies
    • 10.3k views

    Hello unpackme: Safe engine Shielden v2.3.0.0 full protection activated packed notepad.exe windows7 32/64bit good luck notepad_se.rar

    

    Last reply by Teddy Rogers, February 27, 2015