NCK Posted April 13, 2015 Share Posted April 13, 2015 (edited) Hello all . This UnpackMe was protected with Box+Cp+reactor etc .. Have a try ,UnpackMe... Good luck ! I don't want tutorial ,i want to do it by myself ...UnpackMe_hard.rar Edited April 13, 2015 by 381400744 Link to comment Share on other sites More sharing options...
Solution ghostfish Posted April 13, 2015 Solution Share Posted April 13, 2015 1.megaDump or 7zip to remove boxapp 2.de4dot strtok 6000029 and 600002a. 3 de4dot again 4.ilspy debug ( Crypto Obfuscator ) 2 Link to comment Share on other sites More sharing options...
NCK Posted April 13, 2015 Author Share Posted April 13, 2015 @ghostfish Thanks for sharing ! But i think you have not Unpacked full. Link to comment Share on other sites More sharing options...
ghostfish Posted April 13, 2015 Share Posted April 13, 2015 yes. not fully unpacked. and I will continue to learn. Link to comment Share on other sites More sharing options...
Derberux Posted April 13, 2015 Share Posted April 13, 2015 (edited) crypto obfuscator and appfuscator my deobfuscator can handle most of appfuscator UnpackMe hard_deob_ren.rar Edited April 13, 2015 by Alcatraz3222 1 Link to comment Share on other sites More sharing options...
Falcon_2015 Posted April 13, 2015 Share Posted April 13, 2015 i find BoxedAppSDK+Reactor+Crypto+Appfuscator but i can't Decrypt Appfuscator ...... I don't know how to continue? Link to comment Share on other sites More sharing options...
ιvancιтooz Posted April 13, 2015 Share Posted April 13, 2015 boxed app + crypto + net reactor removed!but i don't known how to decrypt appfuscator sorry. boxedapp_dump-cleaned-cleaned.rar Link to comment Share on other sites More sharing options...
CodeShark Posted April 13, 2015 Share Posted April 13, 2015 (edited) crypto obfuscator and appfuscator my deobfuscator can handle most of appfuscator nice Edited April 13, 2015 by CodeShark Link to comment Share on other sites More sharing options...
CodeEnding Posted April 13, 2015 Share Posted April 13, 2015 (edited) I can not decrypt string at all , Because it has a lot UnpackMe hard_Unpacked.rar Edited April 13, 2015 by CodeEnding Link to comment Share on other sites More sharing options...
Security.IRAQ Posted April 13, 2015 Share Posted April 13, 2015 Thenks Dear Link to comment Share on other sites More sharing options...
NCK Posted April 14, 2015 Author Share Posted April 14, 2015 (edited) @Alcatraz3222 装逼遭雷劈? Edited April 14, 2015 by 381400744 Link to comment Share on other sites More sharing options...
Derberux Posted April 14, 2015 Share Posted April 14, 2015 @Alcatraz3222 装逼遭雷劈? i don't understand chinese, and i don't think the translation of google translator is correct. Link to comment Share on other sites More sharing options...
NCK Posted April 14, 2015 Author Share Posted April 14, 2015 @Alcatraz3222 Don't mind ! can you share your tools ? if you don't want . dosen't matter... Link to comment Share on other sites More sharing options...
Derberux Posted April 14, 2015 Share Posted April 14, 2015 @Alcatraz3222 Don't mind ! can you share your tools ? if you don't want . dosen't matter... no sorry, still work in progress, and i don't think they will be public Link to comment Share on other sites More sharing options...
NCK Posted April 14, 2015 Author Share Posted April 14, 2015 OK,I respect your choice .. Link to comment Share on other sites More sharing options...
GIV Posted April 22, 2015 Share Posted April 22, 2015 I don't know the .NET stuff to decrypt but here is first layer removal (Boxed APP Packer).The exe reside unencrypted at last section.You just need to dump and fix.Here is a video for those who are interested. http://upx.nz/5jQw6z 3 Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now