ChOoKi Posted January 20, 2014 Posted January 20, 2014 A new year and a new challenge, have fun kgm16.7z 1
Artic Posted January 27, 2014 Posted January 27, 2014 cool music, but has this no gui? i cant see it in the taskmanger? im on win7 x64 SP1
ChOoKi Posted January 29, 2014 Author Posted January 29, 2014 Runs fine here on XP, W7 & W8. Hidden from the taskbar by default (easy to find the call). 1
DimitarSerg Posted January 29, 2014 Posted January 29, 2014 The general logic of the algorithm is clear but can you give a little hint: is it your own code of block cipher ? (hard to identify)
ChOoKi Posted January 31, 2014 Author Posted January 31, 2014 (edited) It is a variation of an existing block cipher, nothing special Edited January 31, 2014 by ChOoKi 1
DimitarSerg Posted January 31, 2014 Posted January 31, 2014 Some part looks like twofish... but it's not twofish. If anybody will detect it - I'll finish keygen
Dreamer Posted January 31, 2014 Posted January 31, 2014 is it possible to we see someone make tut on this keygenme ?
GIV Posted January 31, 2014 Posted January 31, 2014 On 1/31/2014 at 1:34 PM, Dreamer said: is it possible to we see someone make tut on this keygenme ? Look in crackmes.de. You have plenty to learn from. Just to have the will. P.S. Im eager to see your first keygen. 1
Artic Posted January 31, 2014 Posted January 31, 2014 On 1/29/2014 at 1:03 AM, ChOoKi said: Runs fine here on XP, W7 & W8. Hidden from the taskbar by default (easy to find the call). ok its done by design, thought my OS is acting weird. ok i will give it a try.
piaoyun Posted February 9, 2014 Posted February 9, 2014 (edited) SHA384? fun(sn) = Mid(SHA384(username), 0x11, 0x20); ---> success! Edited February 9, 2014 by piaoyun
DimitarSerg Posted February 9, 2014 Posted February 9, 2014 (edited) On 2/9/2014 at 1:12 PM, piaoyun said: SHA384? fun(sn) = Mid(SHA384(username), 0x11, 0x20); ---> success!sha384 is 5% from algo but even here you are wrong.ChOoKi. Will be hints with block cipher part? Edited February 9, 2014 by DimitarSerg 1
ChOoKi Posted February 10, 2014 Author Posted February 10, 2014 (edited) Quote ChOoKi.Will be hints with block cipher part? I don't know, let's ask kitty >http://youtu.be/kxRX6LXDpWs Edited February 10, 2014 by ChOoKi 1
sama Posted March 19, 2014 Posted March 19, 2014 2 months i must admit that this is a really hard one and i must give up on this one i am eager to see a solution on this one too. anyway, thanks for the challange chooki. 1
ChOoKi Posted March 19, 2014 Author Posted March 19, 2014 (edited) It would be too soon to start posting valid combos, let's just hope someone solves it without hints/help. Best of luck to all. Edited March 19, 2014 by ChOoKi 1
ChOoKi Posted April 18, 2014 Author Posted April 18, 2014 In the spirit of Easter, here is a working combo hope it helps. Name: Easter Egg Code: AT5Kp4x+wpS97+jmxIBHeUy/ebMcSs0l Cheers 2
xSRTsect Posted May 19, 2014 Posted May 19, 2014 (edited) This is sad but I would seriously like to know how to unpack this crap (or the name of the packer) Edited May 19, 2014 by xSRTsect
GIV Posted May 26, 2014 Posted May 26, 2014 (edited) @ xSRTsect The old ESP trick land just one command below OEP. The the file can be unpacked as usual once you have landed on the OEP. Edited May 26, 2014 by GIV
xSRTsect Posted May 26, 2014 Posted May 26, 2014 More or less, you see the packer destroys the usual alignement of the IAT table causing the final dumped PE to be misaligned. And since I *STILL* use imprec and imprec does not have the PE rebuilder/fixer tool my final unpacked file would be non working, thanks for Lord_PE for that one
xSRTsect Posted May 26, 2014 Posted May 26, 2014 Yeah, I know that I have unpacked the file. the problem is with imprec mainly
xSRTsect Posted May 29, 2014 Posted May 29, 2014 FFFFFFFFFFFFFD724D6CA62FEC954111 3CC3C901EE676D1 43684F6F4B69313641
xSRTsect Posted May 30, 2014 Posted May 30, 2014 (edited) edit: sorry I was confused. Edited May 30, 2014 by xSRTsect
xSRTsect Posted June 18, 2014 Posted June 18, 2014 OK, sorry guys but I have been with real busy rl issues the past weeks. Yesterday afternoon I re analised this thing, and delphi appart its a pretty straight scheme I guess. xSRTsectAAAAAAAAfoyrOSrbyaVPFHK5WCkOmg==
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now