Jump to content
Tuts 4 You

.Net ConfuserEx Modified


cawk

Recommended Posts

Difficulty : 2-3
Language : .NET
Platform : Windows
OS Version : Windows 
Packer / Protector : ConfuserEx Modified

Description :

Hello here is my newest version of my obfuscation a lot has changed since my last one. Aim is to unpack the file completely, good luck.

Screenshot :
 

14276f1aa308dd3bb53b156a8f7d34fa.png


https://gyazo.com/14276f1aa308dd3bb53b156a8f7d34fa

Download link in case local one doesn't work:

http://www21.zippyshare.com/v/J5LKYzco/file.html

b.exe

Edited by cawk
  • Thanks 1
Link to comment
  • 2 weeks later...

OK.JPG

use modified ConfuserExConstant.exe to get the two byte arrays

use cc's SimpleByteArrayInit.exe to import the two byte arrays.

use orign file to dump the res.

use cc's resourcemanager.exe to replace the asm linked res.

after these steps , go on with cc's tools for confuserex.

all done.

  • Like 7
Link to comment
  • 4 months later...
  • 4 weeks later...
  • 6 months later...
On 2016/3/27 at 11:34 PM, ghostfish said:

OK.JPG

use modified ConfuserExConstant.exe to get the two byte arrays

use cc's SimpleByteArrayInit.exe to import the two byte arrays.

use orign file to dump the res.

use cc's resourcemanager.exe to replace the asm linked res.

after these steps , go on with cc's tools for confuserex.

all done.

Please share all tools on ConfuserEx.

Thanks a lot.

Edited by ifox
Link to comment

Sometimes my conspirational mind thinks that the people who post unfriendly requests to release the tools are paid by "software protection industry shills" to create a bad atmosphere among the reversing community, so the people in the community would be less willing to release tools and tutorials.

If my evil suspicion is true: It works, you bastards!

Jokes aside, have a nice day.
Cheers

  • Like 3
Link to comment
  • 3 weeks later...
  • 5 months later...
  • 2 weeks later...
On 9/8/2017 at 5:09 PM, ghostfish said:

I'm getting this error when I try to download this attachment.

Sorry, there is a problem

The page you are trying to access is not available for your account.

Error code: 2C171/1

  • Thanks 1
Link to comment

This was removed due to posting in the wrong place 

it was supposed to be a pm 

or atleast I think he tried to remove it

 

all the file is a simple form with eazfuscator VM

Edited by cawk
  • Thanks 1
Link to comment

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...