Jump to content
Tuts 4 You
  • 0
cawk

.Net ConfuserEx Modified

Rate this question

Question

cawk

Difficulty : 2-3
Language : .NET
Platform : Windows
OS Version : Windows 
Packer / Protector : ConfuserEx Modified

Description :

Hello here is my newest version of my obfuscation a lot has changed since my last one. Aim is to unpack the file completely, good luck.

Screenshot :
 

14276f1aa308dd3bb53b156a8f7d34fa.png


https://gyazo.com/14276f1aa308dd3bb53b156a8f7d34fa

Download link in case local one doesn't work:

http://www21.zippyshare.com/v/J5LKYzco/file.html

b.exe

Edited by cawk (see edit history)
  • Thanks 1

Share this post


Link to post

10 answers to this question

Recommended Posts

  • 2
ghostfish

OK.JPG

use modified ConfuserExConstant.exe to get the two byte arrays

use cc's SimpleByteArrayInit.exe to import the two byte arrays.

use orign file to dump the res.

use cc's resourcemanager.exe to replace the asm linked res.

after these steps , go on with cc's tools for confuserex.

all done.

  • Like 7

Share this post


Link to post
  • 1
success

一直膜拜NET 

Share this post


Link to post
  • 0
logkiller

Plz show us this tut!

Share this post


Link to post
  • 0
ifox
On 2016/3/27 at 11:34 PM, ghostfish said:

OK.JPG

use modified ConfuserExConstant.exe to get the two byte arrays

use cc's SimpleByteArrayInit.exe to import the two byte arrays.

use orign file to dump the res.

use cc's resourcemanager.exe to replace the asm linked res.

after these steps , go on with cc's tools for confuserex.

all done.

Please share all tools on ConfuserEx.

Thanks a lot.

Edited by ifox (see edit history)

Share this post


Link to post
  • 0
Zulu

Sometimes my conspirational mind thinks that the people who post unfriendly requests to release the tools are paid by "software protection industry shills" to create a bad atmosphere among the reversing community, so the people in the community would be less willing to release tools and tutorials.

If my evil suspicion is true: It works, you bastards!

Jokes aside, have a nice day.
Cheers

  • Like 2

Share this post


Link to post
  • 0
ghostfish

koivm?

^_^

Share this post


Link to post
  • 0
Youssef13
On 9/8/2017 at 5:09 PM, ghostfish said:

I'm getting this error when I try to download this attachment.

Sorry, there is a problem

The page you are trying to access is not available for your account.

Error code: 2C171/1

  • Thanks 1

Share this post


Link to post
  • 0
tonyweb

@Youssef13
I have the same issue.
I thought it was just my problem ; thank you for letting me know I'm not alone :P

Regards,
Tony

 

Share this post


Link to post
  • 0
cawk

This was removed due to posting in the wrong place 

it was supposed to be a pm 

or atleast I think he tried to remove it

 

all the file is a simple form with eazfuscator VM

Edited by cawk (see edit history)
  • Thanks 1

Share this post


Link to post

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...