A new year and a new challenge, have fun

kgm16.7z

I giv it a try

cool music, but has this no gui? i cant see it in the taskmanger? im on win7 x64 SP1

Runs fine here on XP, W7 & W8. Hidden from the taskbar by default (easy to find the call).

The general logic of the algorithm is clear but can you give a little hint: is it your own code of block cipher ? (hard to identify)

It is a variation of an existing block cipher, nothing special

Edited January 31, 201411 yr by ChOoKi

Some part looks like twofish... but it's not twofish.

If anybody will detect it - I'll finish keygen

is it possible to we see someone make tut on this keygenme ?

is it possible to we see someone make tut on this keygenme ?

Look in crackmes.de.

You have plenty to learn from.

Just to have the will.

 

P.S.

Im eager to see your first keygen.

Runs fine here on XP, W7 & W8. Hidden from the taskbar by default (easy to find the call).

ok its done by design, thought my OS is acting weird. ok i will give it a try.

SHA384?

 

fun(sn) = Mid(SHA384(username), 0x11, 0x20); ---> success!

Edited February 9, 201411 yr by piaoyun

SHA384?

 

fun(sn) = Mid(SHA384(username), 0x11, 0x20); ---> success!

sha384 is 5% from algo but even here you are wrong.

ChOoKi.

Will be hints with block cipher part?

Edited February 9, 201411 yr by DimitarSerg

ChOoKi.

Will be hints with block cipher part?

I don't know, let's ask kitty

 

>http://youtu.be/kxRX6LXDpWs

Edited February 10, 201411 yr by ChOoKi

2 months

i must admit that this is a really hard one and i must give up on this one

i am eager to see a solution on this one too.

anyway, thanks for the challange chooki.

It would be too soon to start posting valid combos, let's just hope someone solves it without hints/help. Best of luck to all.

Edited March 19, 201411 yr by ChOoKi

In the spirit of Easter, here is a working combo hope it helps.

Name: Easter Egg

Code: AT5Kp4x+wpS97+jmxIBHeUy/ebMcSs0l

Cheers

 

This is sad but I would seriously like to know how to unpack this crap

 

(or the name of the packer)

Edited May 19, 201411 yr by xSRTsect

For dumbasses that are as bad as me.

 

 

unpacked.zip

@

xSRTsect

The old ESP trick land just one command below OEP.

The the file can be unpacked as usual once you have landed on the OEP.

Edited May 26, 201411 yr by GIV

More or less, you see the packer destroys the usual alignement of the IAT table causing the final dumped PE to be misaligned. And since I *STILL* use imprec and imprec does not have the PE rebuilder/fixer tool my final unpacked file would be non working, thanks for Lord_PE for that one

Here are 2 methods for a successful unpack.

 

How to.7z

Yeah, I know that I have unpacked the file. the problem is with imprec mainly

FFFFFFFFFFFFFD724D6CA62FEC954111

3CC3C901EE676D1

43684F6F4B69313641

edit: sorry I was confused. 

Edited May 30, 201411 yr by xSRTsect

OK, sorry guys but I have been with real busy rl issues the past weeks. Yesterday afternoon I re analised this thing, and delphi appart its a pretty straight scheme I guess.

 

xSRTsect

AAAAAAAAfoyrOSrbyaVPFHK5WCkOmg==