Jump to content
Tuts 4 You

Recommended Posts

Posted (edited)

Difficulty : 2-3
Language : .NET
Platform : Windows
OS Version : Windows 
Packer / Protector : ConfuserEx Modified

Description :

Hello here is my newest version of my obfuscation a lot has changed since my last one. Aim is to unpack the file completely, good luck.

Screenshot :
 

14276f1aa308dd3bb53b156a8f7d34fa.png


https://gyazo.com/14276f1aa308dd3bb53b156a8f7d34fa

Download link in case local one doesn't work:

http://www21.zippyshare.com/v/J5LKYzco/file.html

b.exe

Edited by cawk
  • Thanks 1
  • 2 weeks later...
Posted

OK.JPG

use modified ConfuserExConstant.exe to get the two byte arrays

use cc's SimpleByteArrayInit.exe to import the two byte arrays.

use orign file to dump the res.

use cc's resourcemanager.exe to replace the asm linked res.

after these steps , go on with cc's tools for confuserex.

all done.

  • Like 7
  • 4 months later...
  • 4 weeks later...
  • 6 months later...
Posted (edited)
On 2016/3/27 at 11:34 PM, ghostfish said:

OK.JPG

use modified ConfuserExConstant.exe to get the two byte arrays

use cc's SimpleByteArrayInit.exe to import the two byte arrays.

use orign file to dump the res.

use cc's resourcemanager.exe to replace the asm linked res.

after these steps , go on with cc's tools for confuserex.

all done.

Please share all tools on ConfuserEx.

Thanks a lot.

Edited by ifox
Posted

Sometimes my conspirational mind thinks that the people who post unfriendly requests to release the tools are paid by "software protection industry shills" to create a bad atmosphere among the reversing community, so the people in the community would be less willing to release tools and tutorials.

If my evil suspicion is true: It works, you bastards!

Jokes aside, have a nice day.
Cheers

  • Like 3
  • 3 weeks later...
  • 5 months later...
  • 2 weeks later...
Posted
On 9/8/2017 at 5:09 PM, ghostfish said:

I'm getting this error when I try to download this attachment.

Sorry, there is a problem

The page you are trying to access is not available for your account.

Error code: 2C171/1

  • Thanks 1
Posted

@Youssef13
I have the same issue.
I thought it was just my problem ; thank you for letting me know I'm not alone :P

Regards,
Tony

 

Posted (edited)

This was removed due to posting in the wrong place 

it was supposed to be a pm 

or atleast I think he tried to remove it

 

all the file is a simple form with eazfuscator VM

Edited by cawk
  • Thanks 1

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...