[Unpackme] Obsidium v1.5 DEMO

[cypher]

Hey guys,

 

while testing ScyllaHide with current protectors I made this little exe.

 

Its Obsidium v1.5 DEMO. Enabled protection options include "Remove Bytes at OEP", "API emulation", "Verify file size", "Encrypt resources"

 

Unpack this and share

NOTEPAD_obsidium_v1.5.rar

[LCF-AT]

Ok

NOTEPAD_obsidium_v1.5_Unpacked.rar

[GIV]

Hey guys,

 

while testing ScyllaHide with current protectors I made this little exe.

 

Its Obsidium v1.5 DEMO. Enabled protection options include "Remove Bytes at OEP", "API emulation", "Verify file size", "Encrypt resources"

 

Unpack this and share

Unpacking a common file in Windows OS is not a great idea because you have on your system the original file so restoring OEP bytes, OEP adress, IAT table and other stuff is at your disposal without any effort. Just some copy/paste stuff at the end.

Edited May 3, 2014 by GIV

[cypher]

Unpacking a common file in Windows OS is not a great idea because you have on your system the original file so restoring OEP bytes, OEP adress, IAT table and other stuff is at your disposal without any effort. Just some copy/paste stuff at the end.

True. I came to same conclusion right after I posted this.

Also one can simply use the vanilla notepad.exe and say he unpacked.

 

But we know the "usual suspects" who we can trust they really unpacked it. Just like LCF hehe

 

Besides that, everyone is welcomed to do a tutorial on this

 

PS: Also one can still challenge yourself with this. So you just lie to yourself if you cheat

Edited May 3, 2014 by cypher

[Aguila]

Working ScyllaHide settings... Time to add some profiles...

Edited May 3, 2014 by Aguila

[GIV]

 

 

Besides that, everyone is welcomed to do a tutorial on this

 

 

I think this can be helpful:

 

https://tuts4you.com/download.php?view.2024

[Gladiator]

Would you please make little tut about unpacking this target ?

thx

[Bidasci]

On 5/2/2014 at 8:35 PM, LCF-AT said:

Ok

 

NOTEPAD_obsidium_v1.5_Unpacked.rar

 

can you post a tutorial on how you did this?