bigboss-62 Posted October 15, 2008 Posted October 15, 2008 (edited) Hello guys... i'm proud to bring you my Yoda's Crypter decryptor. You can say that there are already decryptors for it, like deYoda and unYc, but they have some bugs... 1 - There isn't an individual decryptor for yC 1.1... 2 - I have tried to decrypt with deyoda some crypted Delphi apps crypted with yC, and it can't decrypt it ... So, I've done my own decryptor, supporting for the moment yC v1.1 and yC v1.2. My decrypter have been tested with masm32 apps, vc apps and delphi apps, and it seems to always work... Source code in masm will be included if someone is interested... See you soon in my next decrypter... Laurent aka BIGBOSS from COPs Update 2010-02-13: ------------------------- * Added "Yoda's Crypter v1.x / modified" from a file from Sevy (yC's variant). * Updated decrypter to "CPS!UnYoda v1.1b". (no source provided this time because I don't have the cryptor itself (nor cryptor's name), so i'm not sure about the decrypting pointers and signature). Update 2009-08-07: ------------------------- * Added Yoda's Crypter v1.0 (i found it back!!!) * Updated decrypter "CPS!UnYoda v1.1" which include Yoda's Crypter v1.0 support Update 2009-01-10: ------------------------- * Added Yoda's Crypter v1.3 * Updated decrypter "CPS!UnYoda v1.0b" which include Yoda's Crypter v1.3 support (download link below) CPS_UnYodaCrypter.zip Yoda__sCrypter_v1.1.zip Yoda__sCrypter_v1.2.zip CPS!UnYoda_v1.1.zip YodasCrypter_v1.0.zip CPS!UnYoda_v1.1b.zip Edited February 13, 2010 by bigboss-62 1
Loki Posted October 15, 2008 Posted October 15, 2008 Nice work dude, be good to have a look at the sources if you fancy sharing!
bigboss-62 Posted October 15, 2008 Author Posted October 15, 2008 Nice work dude, be good to have a look at the sources if you fancy sharing! Don't care about Loki... Sources will be available as soon as I found Yoda's Crypter v1.0 (don't remember on which hard drive I store it) to include in my decrypter...
bigboss-62 Posted October 27, 2008 Author Posted October 27, 2008 Ooppps... Help...I can't find yC v1.0 in any from my hard-drives...Can someone could provide me a link to it ? (Teddy, Loki or any one)...PS: This one is needed for the unpacker source to be available...
Loki Posted October 27, 2008 Posted October 27, 2008 had a look and I cannot find a copy below 1.1 I'm afraid......
bigboss-62 Posted January 10, 2009 Author Posted January 10, 2009 (edited) Here is release v1.0b.Unlike previously wanted version (v1.0), I found back v1.3 and I included it in my Decrypter.So, this *new* version is able to unpack v1.1, v1.2 and v1.3 (If someone has v1.0, contact me...)The only limitation is with v1.3. If it was a Delphi crypted program, everything will be decrypted correctly, but the original TLS values will not be restored. I will try to add a new TLS section for all versions...Here is the new version (even if i haven't v1.0, I have included sources in MASM)...Hope it will please to someone...You can give any opinion/idea...CPS_UnYoda_v1.0b.zipYoda__sCrypter_v1.3.zip Edited January 28, 2009 by bigboss-62
bigboss-62 Posted January 28, 2009 Author Posted January 28, 2009 hmm nice coding.. hmm nice coding.. very nice coding... Thank you very much NeO and _ak47_...
bigboss-62 Posted February 15, 2009 Author Posted February 15, 2009 i need yC v1.3 - unpack!..Just have a look here, it is available in this post...
bigboss-62 Posted August 7, 2009 Author Posted August 7, 2009 Yepp!!!I have found Yoda's Crypter v1.0 and I included attachment in the first post...The decrypter was also upgraded to v1.1, with yC v1.0 support...Laurent aka BIGBOSS from COPs...
bigboss-62 Posted February 13, 2010 Author Posted February 13, 2010 (edited) Happy Valentine's day (a few hours before)Sevy brings me a file crypted with a variant of Yoda's Cryptor...The decrypter was also upgraded to v1.1b, with this "Yoda's Crypter v1.x / modified" support... (seems based on yC v1.2).Laurent aka BIGBOSS from COPs...PS: Sources were not included this time, because i got a crypted file and not the cryptor itself.When i will have the cryptor, i will include the sources and specify cryptor's name...I'm on the way to finish my own PEDiminisher unpacker, which is faster than Desperate's one and PED section(s) can be removed. Soon available... Edited February 13, 2010 by bigboss-62
Sevy Posted February 13, 2010 Posted February 13, 2010 thanks bigboss, your tool helped me a lot.Specially the newest version 1.1bThanks again
gmode Posted October 29, 2010 Posted October 29, 2010 what im doing wrong? sory im noob im also attach file that im trying u unpack attach
Zer0Flag Posted October 29, 2010 Posted October 29, 2010 what im doing wrong? sory im noob im also attach file that im trying u unpack attach I think becouse the Target is a modded version of yC so its not able to unpack this. ~Zer0Flag
gmode Posted October 30, 2010 Posted October 30, 2010 this what pcker detector said.. can i use unpacker or i need to manually unpck it? thx
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now