[UnpackMe] Enigma 2.7

[Sh4DoVV]

Hi friends

Please unpack this target

Go0d luck

Enigma 2.7 UnpackMe.rar

[LCF-AT]

Hi,

ok here my unpacked file.Just test it.

greetz

Enigma 2.7 UnpackMe_Unpacked.rar

[LCF-AT]

So it seems that Sh4DoVV is no more there at the moment.Just want to know whether my unpacked file is working or not.So can someone of you 26 downloaders give me a short feedback please?

Thank you

[Lostin]

File runs fine on WinXP SP2

Well done LCF

Would you mind write a tutorial please

Edited September 7, 2011 by Lostin

[LCF-AT]

@ Lostin

Thanks for the report but I also see you are using the same system WinXP SP2 like me. So just wait for the paper tutorial about ENIGMA by DizzY_D which is maybe comming soon [no idea when or whether it comes or not].So this unpackme only used the first protector VM and no second target VM.Problem for you is that you can't use the VM rebuilder dll by DizzY_D for the first VM only for the 2. target VM if used.So DizzY_D told no one how to use it for this only the other way.

- Prevent 2. Process / patch one API or use Olly 2

- Get IAT / use script

- Get OEP / jmp r32 always to find

- Sort APIs if needed with UIF

- Dump & Fix etc

So this unpackme can you also unpack without rebuild the first VM.

greetz

[pseudonym]

So can someone of you 26 downloaders give me a short feedback please?

works fine on xp sp1

thanks

[Lostin]

@LCF-AT

ok dear here my result

I tested it on Windows 7 Ultimate works fine

tested on Windows Xp SP3 works fine

very nice work cheers mate

Edited September 7, 2011 by Lostin

[DeadAndGone]

This is a very hard unpackme since it uses very strong antidebugger tricks...

But here is my unpacked file.

Unpacked.By.Silence.rar

Edited January 5, 2012 by Silence

[Raham]

Hi

@Silence

so easy anti debug, very easy to bypass....i dont know why you call it hard.

KiNd ReGardS

Edited January 6, 2012 by Raham

[DeadAndGone]

Since im not really familliar with engima

[Hadits follower]

enigma compress exe in memomry map . You can simple by olly found the exe in memory map as same reactor 3.x unpacking

Edited January 6, 2012 by Death