Jump to content
Tuts 4 You

[unpackme] VMProtect 2.09 UnpackMe


Recommended Posts

Posted (edited)

forward from http://www.52pojie.c...102581-1-1.html which is protected by ximo

Options:

- Memory Protection

- Import Protection

- Resource Protection

- Anti Debugger

- OEP Mutation + Virtualization

- Using Vmprotect SDK

"Resource Protection" is a new protection option which is start appearing on the version 2.08, It is really difficult to unpack because of this protection.

UnPackMe.rar

Edited by smallyou93
Teddy Rogers
Posted

Is this a genuine unpackme? Also your link does not work and you have not using the correct title format...

Ted.

Teddy Rogers
Posted

The [unpackme] tag has been added to your topic title.

Please remember to follow and adhere to the topic title format - thankyou!

[This is an automated reply]

  • Like 1
Posted (edited)

The [unpackme] tag has been added to your topic title.

Please remember to follow and adhere to the topic title format - thankyou!

[This is an automated reply]

I will follow it on next time, Thanks.

Is this a genuine unpackme? Also your link does not work and you have not using the correct title format...

Ted.

It is a genuine unpackme

Moreover, i am so sorry that I have forgotten to attach the UnPackMe file.

Best Regards.

Edited by smallyou93
Posted (edited)

What is "genuine unpackme"?

For me, protected with "licensed" packer/protector and coded unpackme for it.

Edited by PeP
  • Like 1
Posted (edited)

I cannot run it on my OS unless it is debugged by OllyDBG(1.10).

By the way, great try, and I look forward the tutorial which about your method!

Edited by smallyou93
Posted (edited)

in my pc run in olly 1.1 with strong od, ollyscript and starting in system entrypoint...as lcf was shared in old time

smile.png im was dumped, rebuilded iat by the calc , but not know the integration of resource-.and not know if are good the oep by "00401C40"

well is a good challenge by the vmprotect unpackers.. smile.png

iat is almost done..but strange..the theme of resources not use hook , but not listed in resources..

2 hooks in ntdll... well,..historys

BR, Apuromafo

Edited by Apuromafo
  • 4 months later...
Posted

thanks for the script, much appreciated :)

Posted

many errors in script- but 0 comments

  • 2 weeks later...
Posted (edited)

vmprotect .net

unpack difficult

Edited by myxman

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...