Posted October 15, 200816 yr Hello guys... i'm proud to bring you my Yoda's Crypter decryptor. You can say that there are already decryptors for it, like deYoda and unYc, but they have some bugs... 1 - There isn't an individual decryptor for yC 1.1... 2 - I have tried to decrypt with deyoda some crypted Delphi apps crypted with yC, and it can't decrypt it ... So, I've done my own decryptor, supporting for the moment yC v1.1 and yC v1.2. My decrypter have been tested with masm32 apps, vc apps and delphi apps, and it seems to always work... Source code in masm will be included if someone is interested... See you soon in my next decrypter... Laurent aka BIGBOSS from COPs Update 2010-02-13: ------------------------- * Added "Yoda's Crypter v1.x / modified" from a file from Sevy (yC's variant). * Updated decrypter to "CPS!UnYoda v1.1b". (no source provided this time because I don't have the cryptor itself (nor cryptor's name), so i'm not sure about the decrypting pointers and signature). Update 2009-08-07: ------------------------- * Added Yoda's Crypter v1.0 (i found it back!!!) * Updated decrypter "CPS!UnYoda v1.1" which include Yoda's Crypter v1.0 support Update 2009-01-10: ------------------------- * Added Yoda's Crypter v1.3 * Updated decrypter "CPS!UnYoda v1.0b" which include Yoda's Crypter v1.3 support (download link below) CPS_UnYodaCrypter.zip Yoda__sCrypter_v1.1.zip Yoda__sCrypter_v1.2.zip CPS!UnYoda_v1.1.zip YodasCrypter_v1.0.zip CPS!UnYoda_v1.1b.zip Edited February 13, 201015 yr by bigboss-62
October 15, 200816 yr Author Nice work dude, be good to have a look at the sources if you fancy sharing! Don't care about Loki... Sources will be available as soon as I found Yoda's Crypter v1.0 (don't remember on which hard drive I store it) to include in my decrypter...
October 27, 200816 yr Author Ooppps... Help...I can't find yC v1.0 in any from my hard-drives...Can someone could provide me a link to it ? (Teddy, Loki or any one)...PS: This one is needed for the unpacker source to be available...
January 10, 200916 yr Author Here is release v1.0b.Unlike previously wanted version (v1.0), I found back v1.3 and I included it in my Decrypter.So, this *new* version is able to unpack v1.1, v1.2 and v1.3 (If someone has v1.0, contact me...)The only limitation is with v1.3. If it was a Delphi crypted program, everything will be decrypted correctly, but the original TLS values will not be restored. I will try to add a new TLS section for all versions...Here is the new version (even if i haven't v1.0, I have included sources in MASM)...Hope it will please to someone...You can give any opinion/idea...CPS_UnYoda_v1.0b.zipYoda__sCrypter_v1.3.zip Edited January 28, 200916 yr by bigboss-62
January 28, 200916 yr Author hmm nice coding.. hmm nice coding.. very nice coding... Thank you very much NeO and _ak47_...
February 15, 200916 yr Author i need yC v1.3 - unpack!..Just have a look here, it is available in this post...
August 7, 200916 yr Author Yepp!!!I have found Yoda's Crypter v1.0 and I included attachment in the first post...The decrypter was also upgraded to v1.1, with yC v1.0 support...Laurent aka BIGBOSS from COPs...
February 13, 201015 yr Author Happy Valentine's day (a few hours before)Sevy brings me a file crypted with a variant of Yoda's Cryptor...The decrypter was also upgraded to v1.1b, with this "Yoda's Crypter v1.x / modified" support... (seems based on yC v1.2).Laurent aka BIGBOSS from COPs...PS: Sources were not included this time, because i got a crypted file and not the cryptor itself.When i will have the cryptor, i will include the sources and specify cryptor's name...I'm on the way to finish my own PEDiminisher unpacker, which is faster than Desperate's one and PED section(s) can be removed. Soon available... Edited February 13, 201015 yr by bigboss-62
February 13, 201015 yr thanks bigboss, your tool helped me a lot.Specially the newest version 1.1bThanks again
October 29, 201014 yr what im doing wrong? sory im noob im also attach file that im trying u unpack attach
October 29, 201014 yr what im doing wrong? sory im noob im also attach file that im trying u unpack attach I think becouse the Target is a modded version of yC so its not able to unpack this. ~Zer0Flag
October 30, 201014 yr this what pcker detector said.. can i use unpacker or i need to manually unpck it? thx
Create an account or sign in to comment