Jump to content
Tuts 4 You
skypeaful

[unpackme] .NET UnpackMe/CrackMe Themida + AppFuscator

Rate this topic

Recommended Posts

skypeaful

Hello members of Tuts4You


I write serialme which packed by Themida + AppFuscator


0bPgBaT.png


It's seem easy for talent. Have a try. (The purpose is find correct serial, patching isn't allowed.)


If you got it, please describe how can you do it, thanks...


Serialme_test.rar

Edited by skypeaful (see edit history)

Share this post


Link to post
Share on other sites
li0nsar3c00l

t1%%e$a$b#15589ab64589c6%#1%ba8t



 


dump file on runtime and deobfuscate appfuscator


Share this post


Link to post
Share on other sites
CodeShark

dvt4TS8.png


 


1º - Dump .exe using MegaDumper by CodeCracker.


2º - Fix .exe using UniversalFixer by CodeCracker.


3º - Decrypt the strings (you can use a deobfuscator or do it manually).


4º - Modify the IL code to display the correct message.


 


Thanks to CodeCracker for their tools.


Edited by CodeShark (see edit history)
  • Like 1

Share this post


Link to post
Share on other sites
Falcon_2015

@ CodeShark Thank you for sharing , and Thanks to CodeCracker for their tools. :prop: 


Share this post


Link to post
Share on other sites
skypeaful

Hi all, thank for trying. "t1%%e$a$b#15589ab64589c6%#1%ba8t" is just string to compare with my code to calculate correct serial, it's my serial. My serial like MD5 strings. Does anybody can calculate correct serial?


Edited by skypeaful (see edit history)

Share this post


Link to post
Share on other sites
n0th!ng

you need "brute force" to calculate correct serial 


any way here's unpacked file not full unpacking 


 


Unpacked.rar

Share this post


Link to post
Share on other sites
je9rry

@codeshark  


which tool can Decrypt the strings?


Share this post


Link to post
Share on other sites
skypeaful

@je9rry: You can use Reflector + Microsoft Visual Studio 2012 to write simple code decrypt strings of appfuscator.


li0nsar3c00l also made a de4dot 2.0.3 mod which support appfuscator, I hope he will release it soon.


Share this post


Link to post
Share on other sites
ιvancιтooz

@je9rry: You can use Reflector + Microsoft Visual Studio 2012 to write simple code decrypt strings of appfuscator.

li0nsar3c00l also made a de4dot 2.0.3 mod which support appfuscator, I hope he will release it soon.

what do you mean , you said a modded de4dot 2.0.3 for support appfuscator?¿ 

Share this post


Link to post
Share on other sites
skypeaful

Recently, I have seen this image on li0nsar3c00l blog:

8o6g9g4v.png

I hope he will share his de4dot's mod soon. Write manual decrypt code for each string take a long time.

Edited by skypeaful (see edit history)

Share this post


Link to post
Share on other sites
n0th!ng

Recently, I have seen this image on li0nsar3c00l blog:

8o6g9g4v.png

I hope he will share his de4dot's mod soon. Write manual decrypt code for each string take a long time.

 

the problem of AppFuscator isn't those simple operation is the inline if in parameters

when you write deobfuscator you will find a huge problem to clean the parameters of string decrypter method

Edited by n0th!ng (see edit history)

Share this post


Link to post
Share on other sites
ιvancιтooz

Recently, I have seen this image on li0nsar3c00l blog:

8o6g9g4v.png

I hope he will share his de4dot's mod soon. Write manual decrypt code for each string take a long time.

lol xD

Share this post


Link to post
Share on other sites
MindSystem

Easy :P 


 


GGaOcKM.png


  • Like 1

Share this post


Link to post
Share on other sites
unknown2016

Where can I download the "string decryptor 2.0 by codecracker" or any alternative tools to decrypt Eazfuscator.NET v3.x? 

Share this post


Link to post
Share on other sites
PuffingIn2D
5 minutes ago, unknown2016 said:

Where can I download the "string decryptor 2.0 by codecracker" or any alternative tools to decrypt Eazfuscator.NET v3.x? 

send me the binary i can look at it for you?

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

×