Jump to content
Tuts 4 You

[Unpackme] Obsidium v1.5 DEMO


cypher

Recommended Posts

Hey guys,


 


while testing ScyllaHide with current protectors I made this little exe.


 


Its Obsidium v1.5 DEMO. Enabled protection options include "Remove Bytes at OEP", "API emulation", "Verify file size", "Encrypt resources"


 


Unpack this and share :)


NOTEPAD_obsidium_v1.5.rar

  • Like 1
Link to comment

Hey guys,

 

while testing ScyllaHide with current protectors I made this little exe.

 

Its Obsidium v1.5 DEMO. Enabled protection options include "Remove Bytes at OEP", "API emulation", "Verify file size", "Encrypt resources"

 

Unpack this and share :)

Unpacking a common file in Windows OS is not a great idea because you have on your system the original file so restoring OEP bytes, OEP adress, IAT table and other stuff is at your disposal without any effort. Just some copy/paste stuff at the end.

:)

Edited by GIV
Link to comment

Unpacking a common file in Windows OS is not a great idea because you have on your system the original file so restoring OEP bytes, OEP adress, IAT table and other stuff is at your disposal without any effort. Just some copy/paste stuff at the end.

:)

True. I came to same conclusion right after I posted this.

Also one can simply use the vanilla notepad.exe and say he unpacked.

 

But we know the "usual suspects" who we can trust they really unpacked it. Just like LCF hehe

 

Besides that, everyone is welcomed to do a tutorial on this :)

 

PS: Also one can still challenge yourself with this. So you just lie to yourself if you cheat ;)

Edited by cypher
  • Like 1
Link to comment

Working ScyllaHide settings... Time to add some profiles...


post-22354-0-80777400-1399129817_thumb.p

Edited by Aguila
  • Like 3
Link to comment

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...