Jump to content
Tuts 4 You

[unpackme] .NET UnpackMe/CrackMe Themida + AppFuscator


Recommended Posts

Posted (edited)

Hello members of Tuts4You


I write serialme which packed by Themida + AppFuscator


0bPgBaT.png


It's seem easy for talent. Have a try. (The purpose is find correct serial, patching isn't allowed.)


If you got it, please describe how can you do it, thanks...


Serialme_test.rar

Edited by skypeaful
li0nsar3c00l
Posted

t1%%e$a$b#15589ab64589c6%#1%ba8t



 


dump file on runtime and deobfuscate appfuscator


Posted (edited)

dvt4TS8.png


 


1º - Dump .exe using MegaDumper by CodeCracker.


2º - Fix .exe using UniversalFixer by CodeCracker.


3º - Decrypt the strings (you can use a deobfuscator or do it manually).


4º - Modify the IL code to display the correct message.


 


Thanks to CodeCracker for their tools.


Edited by CodeShark
  • Like 1
Falcon_2015
Posted

@ CodeShark Thank you for sharing , and Thanks to CodeCracker for their tools. :prop: 


Posted (edited)

Hi all, thank for trying. "t1%%e$a$b#15589ab64589c6%#1%ba8t" is just string to compare with my code to calculate correct serial, it's my serial. My serial like MD5 strings. Does anybody can calculate correct serial?


Edited by skypeaful
Posted

you need "brute force" to calculate correct serial 


any way here's unpacked file not full unpacking 


 


Unpacked.rar

Posted

@codeshark  


which tool can Decrypt the strings?


Posted

@je9rry: You can use Reflector + Microsoft Visual Studio 2012 to write simple code decrypt strings of appfuscator.


li0nsar3c00l also made a de4dot 2.0.3 mod which support appfuscator, I hope he will release it soon.


ιvancιтooz
Posted

@je9rry: You can use Reflector + Microsoft Visual Studio 2012 to write simple code decrypt strings of appfuscator.

li0nsar3c00l also made a de4dot 2.0.3 mod which support appfuscator, I hope he will release it soon.

what do you mean , you said a modded de4dot 2.0.3 for support appfuscator?¿ 

Posted (edited)

Recently, I have seen this image on li0nsar3c00l blog:

8o6g9g4v.png

I hope he will share his de4dot's mod soon. Write manual decrypt code for each string take a long time.

Edited by skypeaful
Posted (edited)

Recently, I have seen this image on li0nsar3c00l blog:

8o6g9g4v.png

I hope he will share his de4dot's mod soon. Write manual decrypt code for each string take a long time.

 

the problem of AppFuscator isn't those simple operation is the inline if in parameters

when you write deobfuscator you will find a huge problem to clean the parameters of string decrypter method

Edited by n0th!ng
ιvancιтooz
Posted

Recently, I have seen this image on li0nsar3c00l blog:

8o6g9g4v.png

I hope he will share his de4dot's mod soon. Write manual decrypt code for each string take a long time.

lol xD

  • 3 weeks later...
Posted

Easy :P 


 


GGaOcKM.png


  • Like 1
  • 1 year later...
  • 2 months later...
  • 1 year later...
unknown2016
Posted

Where can I download the "string decryptor 2.0 by codecracker" or any alternative tools to decrypt Eazfuscator.NET v3.x? 

PuffingIn2D
Posted
5 minutes ago, unknown2016 said:

Where can I download the "string decryptor 2.0 by codecracker" or any alternative tools to decrypt Eazfuscator.NET v3.x? 

send me the binary i can look at it for you?

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...