Jump to content
Tuts 4 You

[UnPackMe]◇◆ .Net UnPackMe v4.0 ◆◇


NCK
Go to solution Solved by ghostfish,

Recommended Posts

Hello all .


 


This UnpackMe was protected with Box+Cp+reactor etc ..


 


Have a try  ,UnpackMe...


 


Good luck ! 


 


I don't want tutorial ,i want to do it by myself ...

UnpackMe_hard.rar

Edited by 381400744
Link to comment
Share on other sites

  • Solution

post-86622-0-22759100-1428896334.png


1.megaDump or 7zip to remove boxapp


2.de4dot strtok 6000029 and 600002a.


3 de4dot again


4.ilspy debug ( Crypto Obfuscator ) 


 


 


  • Like 2
Link to comment
Share on other sites

Falcon_2015

  i find BoxedAppSDK+Reactor+Crypto+Appfuscator



but i can't Decrypt Appfuscator ......


I don't know how to continue? :sorry: 


post-86376-0-90974800-1428915204_thumb.j


Link to comment
Share on other sites

crypto obfuscator and appfuscator 

 

my deobfuscator can handle most of appfuscator :P

nice ;)

Edited by CodeShark
Link to comment
Share on other sites

@Alcatraz3222

 

 

装逼遭雷劈?

i don't understand chinese, and i don't think the translation of google translator is correct.

Link to comment
Share on other sites

@Alcatraz3222

 

Don't mind ! 

 

can you share your tools ?

 

if you don't want . dosen't matter...

no sorry, still work in progress, and i don't think they will be public

Link to comment
Share on other sites

I don't know the .NET stuff to decrypt but here is first layer removal (Boxed APP Packer).

The exe reside unencrypted at last section.

You just need to dump and fix.

Here is a video for those who are interested.

 

  • Like 3
Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...