[Keygenme] Keygenme 16

[ChOoKi]

 A new year and a new challenge, have fun

kgm16.7z

[EvOlUtIoN]

I giv it a try

[Artic]

cool music, but has this no gui? i cant see it in the taskmanger? im on win7 x64 SP1

[ChOoKi]

Runs fine here on XP, W7 & W8. Hidden from the taskbar by default (easy to find the call).

[DimitarSerg]

The general logic of the algorithm is clear but can you give a little hint: is it your own code of block cipher ? (hard to identify)

[ChOoKi]

It is a variation of an existing block cipher, nothing special

Edited January 31, 2014 by ChOoKi

[DimitarSerg]

Some part looks like twofish... but it's not twofish.

If anybody will detect it - I'll finish keygen

[Dreamer]

is it possible to we see someone make tut on this keygenme ?

[GIV]

is it possible to we see someone make tut on this keygenme ?

Look in crackmes.de.

You have plenty to learn from.

Just to have the will.

 

P.S.

Im eager to see your first keygen.

[Artic]

Runs fine here on XP, W7 & W8. Hidden from the taskbar by default (easy to find the call).

ok its done by design, thought my OS is acting weird. ok i will give it a try.

[piaoyun]

SHA384?

 

fun(sn) = Mid(SHA384(username), 0x11, 0x20); ---> success!

Edited February 9, 2014 by piaoyun

[DimitarSerg]

SHA384?

 

fun(sn) = Mid(SHA384(username), 0x11, 0x20); ---> success!

sha384 is 5% from algo but even here you are wrong.

ChOoKi.

Will be hints with block cipher part?

Edited February 9, 2014 by DimitarSerg

[ChOoKi]

ChOoKi.

Will be hints with block cipher part?

I don't know, let's ask kitty

 

>http://youtu.be/kxRX6LXDpWs

Edited February 10, 2014 by ChOoKi

[sama]

2 months

i must admit that this is a really hard one and i must give up on this one

i am eager to see a solution on this one too.

anyway, thanks for the challange chooki.

[ChOoKi]

It would be too soon to start posting valid combos, let's just hope someone solves it without hints/help. Best of luck to all.

Edited March 19, 2014 by ChOoKi

[ChOoKi]

In the spirit of Easter, here is a working combo hope it helps.

Name: Easter Egg

Code: AT5Kp4x+wpS97+jmxIBHeUy/ebMcSs0l

Cheers

 

[xSRTsect]

This is sad but I would seriously like to know how to unpack this crap

 

(or the name of the packer)

Edited May 19, 2014 by xSRTsect

[xSRTsect]

For dumbasses that are as bad as me.

 

 

unpacked.zip

[GIV]

@

xSRTsect

The old ESP trick land just one command below OEP.

The the file can be unpacked as usual once you have landed on the OEP.

Edited May 26, 2014 by GIV

[xSRTsect]

More or less, you see the packer destroys the usual alignement of the IAT table causing the final dumped PE to be misaligned. And since I *STILL* use imprec and imprec does not have the PE rebuilder/fixer tool my final unpacked file would be non working, thanks for Lord_PE for that one

[GIV]

Here are 2 methods for a successful unpack.

 

How to.7z

[xSRTsect]

Yeah, I know that I have unpacked the file. the problem is with imprec mainly

[xSRTsect]

FFFFFFFFFFFFFD724D6CA62FEC954111

3CC3C901EE676D1

43684F6F4B69313641

[xSRTsect]

edit: sorry I was confused. 

Edited May 30, 2014 by xSRTsect

[xSRTsect]

OK, sorry guys but I have been with real busy rl issues the past weeks. Yesterday afternoon I re analised this thing, and delphi appart its a pretty straight scheme I guess.

 

xSRTsect

AAAAAAAAfoyrOSrbyaVPFHK5WCkOmg==