patchaya Posted February 8, 2015 Share Posted February 8, 2015 (edited) How to Clean & String Decrypt , Thank you UnpackMe.rar Edited February 8, 2015 by patchaya 1 Link to comment Share on other sites More sharing options...
ιvancιтooz Posted February 8, 2015 Share Posted February 8, 2015 Emmms, the file it's packed with crypto and confuser, and the title is unpack confuser 1.9 Link to comment Share on other sites More sharing options...
SHADOW_UA Posted February 8, 2015 Share Posted February 8, 2015 Too lazy to clean all junk classes UnpackMe_unpacked.zip 3 Link to comment Share on other sites More sharing options...
SHADOW_UA Posted February 8, 2015 Share Posted February 8, 2015 (edited) Tutorial: 1. MegaDumper, get ResourceAssembly.dll (assembly than contains resources)2. Use ConfuserDelegateKiller to remove delegates from UnpackMe.exe (google it)3. de4dot with parameters (-p un --strtyp delegate --strtok 06000043)4. CryptoObfuscator constant fixer by me (pm if you need)4. Remove all instructions from <Module>.cctor5. Attach resources with ResourceManager (use file from step 1)6. Clean from junk classes and delegates Edited February 8, 2015 by SHADOW_UA 14 Link to comment Share on other sites More sharing options...
ιvancιтooz Posted February 8, 2015 Share Posted February 8, 2015 Tutorial: 1. MegaDumper, get ResourceAssembly.dll (assembly than contains resources) 2. ConfuserDelegateKiller (google it) 3. de4dot with parameters (-p un --strtyp delegate --strtok 06000043) 4. CryptoObfuscator constant fixer by me (pm if you need) 4. Remove all instructions from <Module>.cctor 5. Attach resources with ResourceManager 6. Clean from junk classes and delegates I try to use confuser delegate killer but no works Link to comment Share on other sites More sharing options...
SHADOW_UA Posted February 8, 2015 Share Posted February 8, 2015 I try to use confuser delegate killer but no works ResourceAssembly.dll is for step 6. You need to drag UnpackMe.exe on ConfuserDelegateKiller, not this dll. Link to comment Share on other sites More sharing options...
ιvancιтooz Posted February 8, 2015 Share Posted February 8, 2015 (edited) ResourceAssembly.dll is for step 6. You need to drag UnpackMe.exe on ConfuserDelegateKiller, not this dll. and what is the step 1 , i don't understand sorry Edited February 8, 2015 by ♛IvancitoOz♛ Link to comment Share on other sites More sharing options...
patchaya Posted February 9, 2015 Author Share Posted February 9, 2015 @SHADOW_UA thank you very much Link to comment Share on other sites More sharing options...
ιvancιтooz Posted February 9, 2015 Share Posted February 9, 2015 (edited) Unpacked with cleaning source , thanks to shadow_ua , unpacked by IvancitoOz Edited February 10, 2015 by ♛IvancitoOz♛ Link to comment Share on other sites More sharing options...
ghostfish Posted February 10, 2015 Share Posted February 10, 2015 @SHADOW_UA thank you very much Link to comment Share on other sites More sharing options...
LeeZay Posted September 16, 2016 Share Posted September 16, 2016 (edited) @SHADOW_UA help unpack Obfuscated .net Edited September 16, 2016 by LeeZay Link to comment Share on other sites More sharing options...
TheProxy RE Posted September 20, 2016 Share Posted September 20, 2016 On 9/16/2016 at 10:17 AM, LeeZay said: @SHADOW_UA help unpack Obfuscated .net As i can see form the picture that is appfuscator so try to use CodeCracker Apffuscator Unpackers 1 Link to comment Share on other sites More sharing options...
antony Posted September 25, 2016 Share Posted September 25, 2016 thank you very much Link to comment Share on other sites More sharing options...
ymmxl Posted November 27, 2017 Share Posted November 27, 2017 On 2/9/2015 at 3:14 AM, SHADOW_UA said: Tutorial: 1. MegaDumper, get ResourceAssembly.dll (assembly than contains resources) 2. Use ConfuserDelegateKiller to remove delegates from UnpackMe.exe (google it) 3. de4dot with parameters (-p un --strtyp delegate --strtok 06000043) 4. CryptoObfuscator constant fixer by me (pm if you need) 4. Remove all instructions from <Module>.cctor 5. Attach resources with ResourceManager (use file from step 1) 6. Clean from junk classes and delegates Hi there, i know its been a long time since but i would like to know how to determine the specific string token to use in de4dot? Link to comment Share on other sites More sharing options...
aguml Posted December 23, 2017 Share Posted December 23, 2017 Hello friend. I need "CryptoObfuscator constant fixer". ¿Can you send me it? Thanks. PD: I'm spanish and my english is very bad. Link to comment Share on other sites More sharing options...
aguml Posted December 23, 2017 Share Posted December 23, 2017 (edited) Hello friend. I need too "ResourceManager". ¿Can you send me it? Thanks. Edited December 23, 2017 by aguml Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now