UnPackMe
The creation of new topics is disabled in these subforum categories.
Please create and post your new challenges in the appropriate subcategory of Downloads > Challenge of Reverse Engineering
A topic will then automagically be created and posted in these forums...
414 topics in this forum
-
- 14 replies
- 13.3k views
Here you go... have fun! You can use it like this: name.pyc <password> dec.rar
-
Borland Confuser v1.0
by Modify- 8 replies
- 6.5k views
Difficulty : 3 Language : Borland Platform : Windows OS Version : Windows 7 Packer / Protector : Confuser, DNP Method Description : Hi, Don't trust public version packer finder. Good Luck thanks Screenshot : Demo.7z
-
Enigma Protector 5.xx
by Modify- 1 reply
- 13.7k views
Difficulty : 4 and up Language : Borland Platform : Windows x86 OS Version : Windows Xp and up Packer / Protector : Enigma 5.xx latest version Description : UnPackMe and CrackMe I'm not share full version protect, this is protect with demo with all advance options. Good Luck Thanks Screenshot : Demo.7z License.reg
-
Private Exe Protector 5.0.1.0 Demo
by Modify- 8 replies
- 10.7k views
Difficulty : 1 Language : Borland Platform : Windows OS Version : Windows 7 Packer / Protector : Private Exe Protector 5.0.1.0 Demo Description : 1. Unpack and crack. 2. Remove nag please tell me. Screenshot : UnPackMe.7z
-
Unknown Protection v1.0
by Modify- 1 reply
- 13.1k views
Difficulty : 3 I'm not decide Language : AutoIt3 Platform : Windows 32 bit OS Version : Windows 7 Packer / Protector : Unknown + modify Description : Don't patch. Welcome tutorial. Screenshot : UnPackMe.7z
-
Multiple Protection v1.0
by Modify- 4 replies
- 7.4k views
Difficulty : 5 Language : Borland Platform : Windows OS Version : Windows 7 Packer / Protector : Themida 2.3.2.0, Enigma 3.80 Description : Simple modify section, import table Screenshot : UnPackMeDemo.7z
-
[DevirtualizeMe] Themida 2.3.5.0 Full
by HellSpider- 14 replies
- 21.7k views
Hi. My DevirtualizeMe series continue with this entry. I have protected a simple file containing 18 keyboard initiated functions with different virtual machines using a full version of Themida 2.3.5.0 . The file does not have any extra protection as the idea of this challenge is to understand the virtual machines. Also non-virtual machine protection settings are kept to a minimum, meaning no antidebug, no API redirection etc. Basically only antidump is enabled on top of the virtual machines. All of the virtual machine code blocks are identical in sense of instructions. List of function initiators: q = FISH32 White w = FISH32 Red e = FISH32 Bla…
-
[CrackMe/Unpackme]Enigma 4.xx
by danmz- 7 replies
- 8.3k views
Detail : http://prntscr.com/9hav19 Good Luck Salam. CrackMe.rar
-
- 5 replies
- 11.4k views
Simple DevirtualizeMe Created in Oreans Code Virtualizer V2.1.5.0 With attach some files protected by different Modes from Virtual Machine PumaWhite32, all Delphi 7 Compressed and StealthMode have Virtualized strings, the other not. Good luck. StealthModePumaWhite.rar CompressedPumaWhite.rar PumaWhite.rar
-
[Unpackme/Crackme]Armadillo
by mcr65- 6 replies
- 8.4k views
hi please unpacked and cracked this file without serial number and make tutorial thanks. Test1.rar pass: 1234
-
[Unpackme/Crackme] file from a ctf
by bomblader- 3 replies
- 5.8k views
I thought you'll like this little challenge I encoutered during a ctf. puzz.rar
-
[UnpackMe] Unpack Me packed by ZProtect and UPX
by GautamGreat- 1 follower
- 7 replies
- 12.3k views
This unpack me is packed by Double Layer First Layer is UPX Second Layer is ZProtect with HWID Try it. BEST OF LUCK UnpackMe.rar
-
[DeVirtualizeMe] VMProtect V2.13.5 DeVirtualizeMe
by GautamGreat- 1 reply
- 7.9k views
Simple DevirtualizeMe Created in VMProtect V2.13.5 Only one Procedure Virtualized DeVirtualized Procedure VA : 004520DC DevirtualizeMe.vmp.rar
-
[UnpackMe] Jar2Exe v2.1
by CodeExplorer- 14 replies
- 15.1k views
[unpackMe] Jar2Exe v2.1The purpose is unpacking. If you can unpack this write a tutorial. Jar2ExeUnpackMe.zip
-
[DeObfuscateMe] Simple Builder
by 0xNOP- 0 replies
- 7.3k views
Nothing fancy for the app, is a concept to those builders people use in Malware/Server Generators, The Stub is currently missing but you can use literally anything as the Stub xD Just pick any executable, copy it to the builder directory and rename the file to "Stub.exe" it should work as expected. Simple DeObfuscateMe - AznObfuscator Custom (ConfuserEx) For me it's very difficult to deob, If you can do this, then you are all f!@# gods xD Tried everything: Dumping -> Leaves Crashing app, Tried Fixing it, Failed... Used CC tools, None worked. Using UnConfuserEx Seems to work, but leaves app crashing -> Tried Fixing and still crashes... …
-
[DevirtualizeMe] Oreans Virtualizer
by Pancake- 10 replies
- 9.9k views
Updated 30/6 Inspired by HellSpider's topic i upload a simple unvirtualizeme protected with latest licensed Oreans Code Virtualizer, for research purposes. It supports 4 types of VMs, each can be "white" , "red" or "black" (small, bigger, biggest). Pressing buttons 1-4 will pop up 2 messageboxes. Source: int Func1(int a, int b, int c){ VIRTUALIZER_FISH_RED_START MessageBoxA(0, "Fish Red", "UnvirtualizeMe", 0); Sleep((a + b + c) % 1000); MessageBoxA(0, "Complexity 2/10 Speed 9/10 Size 260", "Fish Red", 0); return GetTickCount(); VIRTUALIZER_FISH_RED_END }void* Func2(int* a, int* b, int* c){ VIRTUALIZER_PUMA_BLACK_START MessageBoxA(0,…
-
[UnPackMe] Armadillo 9.64 32-bit
by SmilingWolf- 1 follower
- 21 replies
- 17.4k views
Hello everybody! Today I would like to present you all an unpackme protected with the latest version of SoftwarePassport/Armadillo. This one is one of the most complete Armadillo unpackmes ever made, implementing almost everything Arma puts in the hands of the user ranging from the simple "Protect with password" to the nanomites, the code splices and everything in between. I have tried not to make it too easy for you all, just take a look at it The final goal is to manually unpack it, study it and show you have been able to read the first file you see when opening the password protected archive attached to this post (Mistery.7z). Enjoy! Unpackme.7z Mi…
-
- 16 replies
- 20.7k views
This is a simple UnpackMe using VMProtect Ultimate v2.13.5. I also used vmp's licensing system in this UnackMe, and locked one function with key. I have provided 3 different keys for this bin. A blocked key ,a valid key locked with a hwid(which i suppose no one has th same hwid) and an expire key. I also added 2 anti-debug thread to this file. Using VMProtectIsDebuggerPresent(if you have sod, i guess you can bypass this one pretty easy) and VMProtectIsValidImageCRC(crc). Didn't use VMProtectDecryptString feature. Several things I expect from this UM: Simply unpack it. Bypass the blacklist key. Bypass the expired situation. Patch hwid. Better create a …
-
[UnpackMe] Enigma Protector 3.100
by HellSpider- 13 replies
- 9.3k views
Hi. Attached an unpackme protected by Enigma Protector 3.100 - Build 20121010 . The unpackme is coded in MASM. unpackme_enigma_3.100.rar
-
[CrackMe/UnpackMe] Enigma 4.20++
by Unc3nZureD- 4 replies
- 8.6k views
Hi guys, here's a quite simple crackme and packed with enigma. Let's see if you can unpack it & crack it The "License scheme" Is very simple and only contains numbers. The goal is not to write the License denied message, but the other one Why is it ++? Because I tried to use Enigma as deep as possible I used markers, vm and some more. There are a few stuff which I couldn't figure out how to use, but I think it should be harder than simply unpacking an enigma. Link to download: http://ge.tt/1nlum7F2/v/0?c Good luck guys. Edit: Added file to the post Modified description a bit EnigmaCrackMe_protected.7z
-
[unpack] Unpack PEncrypt 4.0 Protector
by Security.IRAQ- 1 follower
- 6 replies
- 11.4k views
Hi , Unpack The PEncrypt 4.0 Protector Youtube https://www.youtube.com/watch?v=pV7d9Rec-2M Tool : gunpacker GUnPacker.rar
-
[UnpackMe] Enigma 4.00
by Softgate- 13 replies
- 17.5k views
Protection setting is described in the readme. Enigma400Unpackme.rar
-
- 1 follower
- 12 replies
- 11.8k views
UnpackMe Enigma 4.10 (maximum protection) + registration dialog (HWID) UnpackMe Enigma 4.10 (maximum protection).rar UnpackMe Enigma 4.10 (maximum protection+HWID).rar
-
[UnpackMe] Themida 2.3.1.0
by Arting- 5 replies
- 7.5k views
This target is protected with Themida 2.3.1.0 Virtualize Protection Core With: TIGER32 (Black) Good luck! UnpackMe Themida 2.3.1.0.rar
-
[unpackme] UnPackMe
by zelda- 3 replies
- 10.3k views
Hello unpackme: Safe engine Shielden v2.3.0.0 full protection activated packed notepad.exe windows7 32/64bit good luck notepad_se.rar