UnPackMe
The creation of new topics is disabled in these subforum categories.
Please create and post your new challenges in the appropriate subcategory of Downloads > Challenge of Reverse Engineering
A topic will then automagically be created and posted in these forums...
422 topics in this forum
-
- 2 followers
- 17 replies
- 22.9k views
Hi all. Here is a Armadillo 9.64 (X86) unpackme made with a custom build. The file is bundled with (almost) all protections that Armadillo can provide. There are many tutorials regarding Armadillo unpacking so i guess is not a great deal to unpack even it haves many layers of protection that Arma can provide. If you look deep in the unpackme you will find the weaknesses. Good luck! Goal is unpack and make a tutorial for others to see and learn because all it remains is the lagacy of tutorials witch are passed from one generation to another. Unpackme.7z
-
Easy Unpackme Enigma 5.6
by Apuromafo- 1 follower
- 18 replies
- 35.9k views
Difficulty : 0 Language : free pascal /Lazarus IDE x86 Platform : Windows X86 OS Version : XP and above Packer / Protector : Enigma Protector 5.6 Description : Small unpackme for do a simple tutorial maybe is easy, but i hope there you too can do tutorial BR, APuromafo Silver= unpacked.exe Bronce=unpacked +tutorial Gold=unpacked+tutorial+script PID scan: Scanning -> C:\project1_protected.exe File Type : 32-Bit Exe (Subsystem : Win GUI / 2), Size : 6942172 (069EDDCh) Byte(s) | Machine: 0x14C (I386) Compilation TimeStamp : 0x00000000 -> Thu 01st Jan 1970 00:00:00 (GMT) -> File has 933852 (0E3FDCh) bytes…
-
Medium Unpackme Enigma 5.6
by Apuromafo- 1 follower
- 16 replies
- 17.2k views
Difficulty : 3 Language : Delphi 7 SE Platform : Windows X86 OS Version : XP and above Packer / Protector : Enigma Protector 5.6 Description : Medium unpackme for do a tutorial/tut maybe is medium because i gived info of registration , maybe lv 8 without registration BR, APuromafo Silver= unpacked.exe Bronce=unpacked +tutorial Gold=unpacked+tutorial+script PID scan: -=[ ProtectionID v0.6.8.5 DECEMBER]=- (c) 2003-2017 CDKiLLER & TippeX Build 24/12/16-13:09:21 Ready... Scanning -> C:\Users\Pc\Desktop\Proyecto delphi Apuromafo\Project2_protected.exe File Type : 32-Bit Exe (Subsystem : Win GUI / 2), S…
-
Artan Protector 2.0 UnpackMe
by Gladiator- 24 replies
- 11.3k views
Difficulty : 5 Language : Delphi Platform : Windows x86/x64 OS Version : XP SP2 and above. Packer / Protector : Artan Protector 2.0 UnpackMe with all options enabled with normal complexity. Description : Unpack the file and keep the application working. ScreenShot : Artan_2_UnPackMe.zip
-
[UnpackMe] BoxedApp Packer 3.2.3.9 Demo UnpackMe
by madskillz- 9 replies
- 17k views
Protections: BoxedApp Packer 3.2.3.9 Demo If you succed to unpack please make a tutorial. Attached FilesBoxedApp Packer 3.2.3.9 Demo UnpackMe.zip
-
[UnpackMe] Themida ZProtect Mix
by delldell- 1 follower
- 13 replies
- 10.6k views
Themida , ZProtect =Mix Unpackme = Delphi 7 Have Fun delldell_UnpackMe_Themida__ZProtect.rar
-
[UnpackMe] UnpackMe
by CodeExplorer- 8 replies
- 12.3k views
[unpackMe] UnpackMe Can you unpack this? Should be harder then previous version!
-
C++/CLI UnpackME
by SHADOW_UA- 4 replies
- 7.5k views
Difficulty : 3 Language : C++ (C++/CLI) Platform : Windows OS Version : XP and above Packer / Protector : Enigma Protector 5 Description : The goal is to eliminate Enigma Protector from this executable and keep it working afterwards. Write a short tutorial. Screenshot : UnpackME.zip
-
- 14 replies
- 13.9k views
Here you go... have fun! You can use it like this: name.pyc <password> dec.rar
-
Borland Confuser v1.0
by Modify- 8 replies
- 6.8k views
Difficulty : 3 Language : Borland Platform : Windows OS Version : Windows 7 Packer / Protector : Confuser, DNP Method Description : Hi, Don't trust public version packer finder. Good Luck thanks Screenshot : Demo.7z
-
Enigma Protector 5.xx
by Modify- 1 reply
- 14.6k views
Difficulty : 4 and up Language : Borland Platform : Windows x86 OS Version : Windows Xp and up Packer / Protector : Enigma 5.xx latest version Description : UnPackMe and CrackMe I'm not share full version protect, this is protect with demo with all advance options. Good Luck Thanks Screenshot : Demo.7z License.reg
-
Private Exe Protector 5.0.1.0 Demo
by Modify- 8 replies
- 11k views
Difficulty : 1 Language : Borland Platform : Windows OS Version : Windows 7 Packer / Protector : Private Exe Protector 5.0.1.0 Demo Description : 1. Unpack and crack. 2. Remove nag please tell me. Screenshot : UnPackMe.7z
-
Unknown Protection v1.0
by Modify- 1 reply
- 13.7k views
Difficulty : 3 I'm not decide Language : AutoIt3 Platform : Windows 32 bit OS Version : Windows 7 Packer / Protector : Unknown + modify Description : Don't patch. Welcome tutorial. Screenshot : UnPackMe.7z
-
Multiple Protection v1.0
by Modify- 4 replies
- 14.5k views
Difficulty : 5 Language : Borland Platform : Windows OS Version : Windows 7 Packer / Protector : Themida 2.3.2.0, Enigma 3.80 Description : Simple modify section, import table Screenshot : UnPackMeDemo.7z
-
[DevirtualizeMe] Themida 2.3.5.0 Full
by HellSpider- 14 replies
- 28.4k views
Hi. My DevirtualizeMe series continue with this entry. I have protected a simple file containing 18 keyboard initiated functions with different virtual machines using a full version of Themida 2.3.5.0 . The file does not have any extra protection as the idea of this challenge is to understand the virtual machines. Also non-virtual machine protection settings are kept to a minimum, meaning no antidebug, no API redirection etc. Basically only antidump is enabled on top of the virtual machines. All of the virtual machine code blocks are identical in sense of instructions. List of function initiators: q = FISH32 White w = FISH32 Red e = FISH32 Bla…
-
[CrackMe/Unpackme]Enigma 4.xx
by danmz- 7 replies
- 9.1k views
Detail : http://prntscr.com/9hav19 Good Luck Salam. CrackMe.rar
-
- 5 replies
- 11.9k views
Simple DevirtualizeMe Created in Oreans Code Virtualizer V2.1.5.0 With attach some files protected by different Modes from Virtual Machine PumaWhite32, all Delphi 7 Compressed and StealthMode have Virtualized strings, the other not. Good luck. StealthModePumaWhite.rar CompressedPumaWhite.rar PumaWhite.rar
-
[Unpackme/Crackme]Armadillo
by mcr65- 6 replies
- 8.8k views
hi please unpacked and cracked this file without serial number and make tutorial thanks. Test1.rar pass: 1234
-
[Unpackme/Crackme] file from a ctf
by bomblader- 3 replies
- 6.1k views
I thought you'll like this little challenge I encoutered during a ctf. puzz.rar
-
[UnpackMe] Unpack Me packed by ZProtect and UPX
by GautamGreat- 1 follower
- 7 replies
- 12.6k views
This unpack me is packed by Double Layer First Layer is UPX Second Layer is ZProtect with HWID Try it. BEST OF LUCK UnpackMe.rar
-
[DeVirtualizeMe] VMProtect V2.13.5 DeVirtualizeMe
by GautamGreat- 1 reply
- 8.1k views
Simple DevirtualizeMe Created in VMProtect V2.13.5 Only one Procedure Virtualized DeVirtualized Procedure VA : 004520DC DevirtualizeMe.vmp.rar
-
[UnpackMe] Jar2Exe v2.1
by CodeExplorer- 14 replies
- 16.7k views
[unpackMe] Jar2Exe v2.1The purpose is unpacking. If you can unpack this write a tutorial. Jar2ExeUnpackMe.zip
-
[DeObfuscateMe] Simple Builder
by 0xNOP- 0 replies
- 7.6k views
Nothing fancy for the app, is a concept to those builders people use in Malware/Server Generators, The Stub is currently missing but you can use literally anything as the Stub xD Just pick any executable, copy it to the builder directory and rename the file to "Stub.exe" it should work as expected. Simple DeObfuscateMe - AznObfuscator Custom (ConfuserEx) For me it's very difficult to deob, If you can do this, then you are all f!@# gods xD Tried everything: Dumping -> Leaves Crashing app, Tried Fixing it, Failed... Used CC tools, None worked. Using UnConfuserEx Seems to work, but leaves app crashing -> Tried Fixing and still crashes... …
-
[DevirtualizeMe] Oreans Virtualizer
by Pancake- 10 replies
- 10.5k views
Updated 30/6 Inspired by HellSpider's topic i upload a simple unvirtualizeme protected with latest licensed Oreans Code Virtualizer, for research purposes. It supports 4 types of VMs, each can be "white" , "red" or "black" (small, bigger, biggest). Pressing buttons 1-4 will pop up 2 messageboxes. Source: int Func1(int a, int b, int c){ VIRTUALIZER_FISH_RED_START MessageBoxA(0, "Fish Red", "UnvirtualizeMe", 0); Sleep((a + b + c) % 1000); MessageBoxA(0, "Complexity 2/10 Speed 9/10 Size 260", "Fish Red", 0); return GetTickCount(); VIRTUALIZER_FISH_RED_END }void* Func2(int* a, int* b, int* c){ VIRTUALIZER_PUMA_BLACK_START MessageBoxA(0,…
-
[UnPackMe] Armadillo 9.64 32-bit
by SmilingWolf- 1 follower
- 21 replies
- 18.8k views
Hello everybody! Today I would like to present you all an unpackme protected with the latest version of SoftwarePassport/Armadillo. This one is one of the most complete Armadillo unpackmes ever made, implementing almost everything Arma puts in the hands of the user ranging from the simple "Protect with password" to the nanomites, the code splices and everything in between. I have tried not to make it too easy for you all, just take a look at it The final goal is to manually unpack it, study it and show you have been able to read the first file you see when opening the password protected archive attached to this post (Mistery.7z). Enjoy! Unpackme.7z Mi…
