NCK Posted April 13, 2015 Posted April 13, 2015 (edited) Hello all . This UnpackMe was protected with Box+Cp+reactor etc .. Have a try ,UnpackMe... Good luck ! I don't want tutorial ，i want to do it by myself ...UnpackMe_hard.rar Edited April 13, 2015 by 381400744
Solution ghostfish Posted April 13, 2015 Solution Posted April 13, 2015 1.megaDump or 7zip to remove boxapp 2.de4dot strtok 6000029 and 600002a. 3 de4dot again 4.ilspy debug ( Crypto Obfuscator ) 2
NCK Posted April 13, 2015 Author Posted April 13, 2015 @ghostfish Thanks for sharing ！ But i think you have not Unpacked full.
ghostfish Posted April 13, 2015 Posted April 13, 2015 yes. not fully unpacked. and I will continue to learn.
Derberux Posted April 13, 2015 Posted April 13, 2015 (edited) crypto obfuscator and appfuscator my deobfuscator can handle most of appfuscator UnpackMe hard_deob_ren.rar Edited April 13, 2015 by Alcatraz3222 1
Falcon_2015 Posted April 13, 2015 Posted April 13, 2015 i find BoxedAppSDK+Reactor+Crypto+Appfuscator but i can't Decrypt Appfuscator ...... I don't know how to continue?
ιvancιтooz Posted April 13, 2015 Posted April 13, 2015 boxed app + crypto + net reactor removed!but i don't known how to decrypt appfuscator sorry. boxedapp_dump-cleaned-cleaned.rar
Undebel Posted April 13, 2015 Posted April 13, 2015 (edited) crypto obfuscator and appfuscator my deobfuscator can handle most of appfuscator nice Edited April 13, 2015 by CodeShark
CodeEnding Posted April 13, 2015 Posted April 13, 2015 (edited) I can not decrypt string at all , Because it has a lot UnpackMe hard_Unpacked.rar Edited April 13, 2015 by CodeEnding
NCK Posted April 14, 2015 Author Posted April 14, 2015 (edited) @Alcatraz3222 装逼遭雷劈？ Edited April 14, 2015 by 381400744
Derberux Posted April 14, 2015 Posted April 14, 2015 @Alcatraz3222 装逼遭雷劈？ i don't understand chinese, and i don't think the translation of google translator is correct.
NCK Posted April 14, 2015 Author Posted April 14, 2015 @Alcatraz3222 Don't mind ! can you share your tools ? if you don't want . dosen't matter...
Derberux Posted April 14, 2015 Posted April 14, 2015 @Alcatraz3222 Don't mind ! can you share your tools ? if you don't want . dosen't matter... no sorry, still work in progress, and i don't think they will be public
GIV Posted April 22, 2015 Posted April 22, 2015 I don't know the .NET stuff to decrypt but here is first layer removal (Boxed APP Packer).The exe reside unencrypted at last section.You just need to dump and fix.Here is a video for those who are interested. http://upx.nz/5jQw6z 3
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now