Unpacking yoda 1.0-1.3 Exe

[Sevy]

Hi all,

New here, but noticed some people here know their stuff(well close to all of them).

I was hoping to find some help here.

I am trying to unpack a exe which is crypted with yoda 1.3.

After some searching i found CPS_UnYoda_v1.0b

This did something, but not extract it.

Though PEid says its yoda 1.x now instead of 1.3

But unpacking it has not worked yet, i also found Quick_Unpack_2.2.Tool

But this was in russian language or something.

So i have no idea if this can do it, or what error it actually gives when i try.

Thanks

Any helps is much appreciated.

[bigboss-62]

Hy Sevy,

May be Yoda's Crypter v1.0, because my CPS!UnYoda v1.0b doesn't support it ?

Have you tried with CPS!UnYoda v1.1, which you can find it in first post of my yC Decryptor thread...

If it still doesn't work, it may be a modified variant of Yoda's Crypter...

Just send me a link of your file to unpack, or attach it in zipped form in this thread...

See you soon ...

Laurent aka BIGBOSS from COPs

Edited February 11, 2010 by bigboss-62

[Apuromafo]

Hi all,

New here, but noticed some people here know their stuff(well close to all of them).

I was hoping to find some help here.

I am trying to unpack a exe which is crypted with yoda 1.3.

After some searching i found CPS_UnYoda_v1.0b

This did something, but not extract it.

Though PEid says its yoda 1.x now instead of 1.3

But unpacking it has not worked yet, i also found Quick_Unpack_2.2.Tool

But this was in russian language or something.

So i have no idea if this can do it, or what error it actually gives when i try.

Thanks

Any helps is much appreciated.

in tuts4you.com use the search item, for that,

for unpacker i will preffer the apox engine,

but for unpack yoda crypter, normallly can be a doble packed or single similarity

normally is better use ollydbg+ phantom + strong od

and search the oep..with some of time

what are your trying..the generic unpacker Quick_Unpack_2.2.Tool

have option to change the lenguage in menu tool, try to change to english.. is not difficult

if are comercial o unpackme , try to send the link that are looking, but not promise nothing..

this is a area of coding..the correct area , maybe can be a request forum in asta..of snd because comercial , or trying to search a litte more in the forum in generally.

ps: http://ap0x.jezgra.net/RL!deYC.rar is good normally..

and other fake sing, exist an script recent of lcf-at..if are rlpack..

see ya

[Sevy]

Hi guys,

Thanks for the fast reply.

I tried both CPS!UnYoda v1.1 and RL!deYC

Both unpacked it, i must have used the wrong version.

As for Quick_Unpack_2.2, sorry i have missed the option to turn it to english language.

But in the end was unable to unpack the exe.

But both other programs did, so i can continue again.

Thanks a lot for the help.

I hope i can learn some things from this forum, already a perfect start

[Sevy]

Another question regarding this, something i did not pay attention to.

After unpacking i get this

Detected: Nothing found [Overlay]*

Scan mode : Hardcore

Entropy: 7.98 Packed

EP Check : Not packed

Fast check : Packed

i was hoping for a result more like this

Detected : Microsoft Visual C++ 7.0

Scan mode : Normal

Entropy : 6.59(Maybe packed)

EP Check: Not packed

Fast Check: Not packed.

Can any of you please explain me the difference

[gmode]

hi all i need some help unpacking a file.tq

this file has been pack with yoda chinnese something..check it out

thank for your help.

:edit:

I have deleted your attachment.

This is not a crack request forum. If you need help to learn unpacking something, start your own topic in the appropriate sub forum.

This is your one and only warning.

Edited October 10, 2010 by Fungus

[gmode]

hi all i need some help unpacking a file.tq

this file has been pack with yoda chinnese something..check it out

thank for your help.

:edit:

I have deleted your attachment.

This is not a crack request forum. If you need help to learn unpacking something, start your own topic in the appropriate sub forum.

This is your one and only warning.

sorry.. im newb, this is my 1st post and i got warn.T_T