[UnPackMe] Agile Net :)

[teehist]

I made a simple program that has the packer "AgileNet"

 

 The challenge is to remove this protection and send the code of "MainForm" or "Form1" in his case.

 

 If you can meet the requirements below.

 

 What program used to unpacker?

 Level of difficulty?

 

 

Scan 3/57: https://www.virustotal.com/pt/file/e6b3d3d176e72a5746c692f94749bd760ac46730ce7dcd04c0e62b3ab150bef4/analysis/1422818674/

 

 

Scan of file without AgileNet 0/57: https://www.virustotal.com/pt/file/45588b05ae940e7d321be6a8622a2d4555eca9f3e424d05e2107c65b80da9fba/analysis/1422818773/

 

I believe that the virus scan with the accused AgileNet is caused by the very packer.

 

Please read, Viruses accused really do not know why is accusing because the file without AgileNet it is clean.

 

The program only messagebox, confirming or not, and a ToolStrip, nothing more.

2MFTools.rar

Edited February 1, 2015 by teehist

[SHADOW_UA]

private void toolStripButton1_Click(object sender, EventArgs e)

{

   MessageBox.Show("You fell into the tale ass silver [Brazilian Story ]", "Tuts4you.com", MessageBoxButtons.OKCancel, MessageBoxIcon.Asterisk);

}

private void Form1_FormClosing(object sender, FormClosingEventArgs e)

{

if (MessageBox.Show("Do you want to exit?", "Tuts4you.com", MessageBoxButtons.YesNo, MessageBoxIcon.Question) == DialogResult.Yes)

{

Application.Exit();

}

}

2MFTools-unpacked.zip

[teehist]

Now answer the questionnaires ? kkkk

[alorent]

What about code virtualization technique offered by AgileNet? is that present in the crackme?

Edited February 3, 2015 by alorent

[abassi-28]

Imports System

Imports System.ComponentModel

Imports System.Drawing

Imports System.Windows.Forms
Namespace MFTools

   Public Class Form1

       Inherits Form
       Private icontainer_0 As IContainer
       Private toolStrip1 As ToolStrip
       Private toolStripButton1 As ToolStripButton
       Private toolStripSeparator1 As ToolStripSeparator
       Public Sub New()

           Me.InitializeComponent()

       End Sub
       Private Sub toolStripButton1_Click(sender As Object, e As EventArgs)

           MessageBox.Show("You fell into the tale ass silver [Brazilian Story ]", "Tuts4you.com", MessageBoxButtons.OKCancel, MessageBoxIcon.Asterisk)

       End Sub
       Private Sub Form1_Load(sender As Object, e As EventArgs)

       End Sub
       Private Sub Form1_FormClosing(sender As Object, e As FormClosingEventArgs)

           If MessageBox.Show("Do you want to exit?", "Tuts4you.com", MessageBoxButtons.YesNo, MessageBoxIcon.Question) = DialogResult.Yes Then

               Application.[Exit]()

           End If

       End Sub
       Protected Overrides Sub Dispose(disposing As Boolean)

           If disposing AndAlso Me.icontainer_0 IsNot Nothing Then

               Me.icontainer_0.Dispose()

           End If

           MyBase.Dispose(disposing)

       End Sub
       Private Sub InitializeComponent()

           Dim componentResourceManager As ComponentResourceManager = New ComponentResourceManager(GetType(Form1))

           Me.toolStrip1 = New ToolStrip()

           Me.toolStripButton1 = New ToolStripButton()

           Me.toolStripSeparator1 = New ToolStripSeparator()

           Me.toolStrip1.SuspendLayout()

           MyBase.SuspendLayout()

           Me.toolStrip1.Items.AddRange(New ToolStripItem()() { Me.toolStripButton1, Me.toolStripSeparator1 })

           Me.toolStrip1.LayoutStyle = ToolStripLayoutStyle.Flow

           Me.toolStrip1.Location = New Point(0, 0)

           Me.toolStrip1.Name = "toolStrip1"

           Me.toolStrip1.Size = New Size(179, 23)

           Me.toolStrip1.TabIndex = 0

           Me.toolStrip1.Text = "toolStrip1"

           Me.toolStripButton1.DisplayStyle = ToolStripItemDisplayStyle.Text

           Me.toolStripButton1.Image = CType(componentResourceManager.GetObject("toolStripButton1.Image"), Image)

           Me.toolStripButton1.ImageTransparentColor = Color.Magenta

           Me.toolStripButton1.Name = "toolStripButton1"

           Me.toolStripButton1.Size = New Size(170, 17)

           Me.toolStripButton1.Text = "Click here and win License 4ever."

           AddHandler Me.toolStripButton1.Click, AddressOf Me.toolStripButton1_Click

           Me.toolStripSeparator1.Name = "toolStripSeparator1"

           Me.toolStripSeparator1.Size = New Size(6, 23)

           MyBase.AutoScaleDimensions = New SizeF(6F, 13F)

           MyBase.AutoScaleMode = AutoScaleMode.Font

           MyBase.ClientSize = New Size(179, 23)

           MyBase.Controls.Add(Me.toolStrip1)

           MyBase.FormBorderStyle = FormBorderStyle.FixedToolWindow

           MyBase.Name = "Form1"

           Me.Text = "Themida?/license?"

           AddHandler MyBase.FormClosing, AddressOf Me.Form1_FormClosing

           AddHandler MyBase.Load, AddressOf Me.Form1_Load

           Me.toolStrip1.ResumeLayout(False)

           Me.toolStrip1.PerformLayout()

           MyBase.ResumeLayout(False)

           MyBase.PerformLayout()

       End Sub

   End Class

End Namespace

unpacked.rar

Edited February 3, 2015 by abassi-28

[teehist]

What about code virtualization technique offered by AgileNet? is that present in the crackme?

Could you be more specific, my translator is very horrible.

[alorent]

I mean that Agile .NET offers a feature called "Code Virtualization" where you select specific methods to be virtualized.

 

Did you add that feature into the crackme?

Thanks

[m0h1991m0h]

now <>> gow to unpack this projact 

[man of the war]

We See The Chalinge And No TUT For Any One How We Can't Learn To Unpcak Like This Protcted !!!!

[xxyd521]

how to unpack the latest Agile.NET?

[mark ruth]

I would love to know as well.