Jump to content
Tuts 4 You
  • 0
Sign in to follow this  
leopardu3u3

ConfuserEX v1.0 modded

Question

leopardu3u3

Difficulty : 4
Language : .net
Platform : Windows
OS Version : ALL
Packer / Protector : ConfuserEx Modded

Description :

Unpack this modified version of confuserEX and tell us how you did it :)

P/S Antivirus might detect it as malware but it's normal just because of the obfuscation

Screenshot : R5S7B58.png

UnPackMe.exe

check.png

Share this post


Link to post

4 answers to this question

Recommended Posts

  • 0
leopardu3u3
On 2017-04-07 at 4:08 PM, Reza-HNA said:

just use dnSpy and CodeCracker tools .

KyHIlgq.png

UnpackMe-DeObfuscated.exe

i tried following this tut 

but i have a problem at 2:36 where i can't find gchandle and my file is filled with ICSharpCode.Decompiler.DecompilerException: Error decompiling System.Void <Module>::AMAMODﬤﬢﬔﬣײַ㐔㐐ﬡﬓ㐓ﬕﬔ㐒ﬔﬣ㐒ﬣ㐓㐓㐑ﬣﬓﬔﬣ㐒㐔㐐ﬕ㐒㐑ﬖﬥﬢ㐑ﬥﬤﬥ㐔ײַ㐒KmoxPpxyyatKdwgJuRPOaDtoyWVOn9EZi>G31r$9IVM/h47A's8`9(System.Array,System.Int32,System.Int32)

 

Share this post


Link to post
  • 0
deztroyr1
On ‎1‎-‎12‎-‎2017 at 9:52 AM, 淡淡幽香 said:

image.png.c5dc7b9a1c1fe4280b41f9245cb0f577.png

This is my result

UnpackMe-ok.exe

 

My solution seems to be almost the same as the person above. my solution is not executable but the solution of 淡淡幽香 is executable.

Could anyone tell me what I did wrong? I have to fix entry point or what?

Thanks for any pointers.

UnPackMe-hmm.exe

unpackme-hmm.png

 

Ok nevermind I fixed it by adjusting the entry point lol.

 

UnPackMe-hmm1.exe

unpackme-hmm1.png

Edited by deztroyr1 (see edit history)

Share this post


Link to post

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
Sign in to follow this  
×
×
  • Create New...