ConfuserEx 1.0 Modified

[NightBullet]

Difficulty : 3,5
Language : C#
Platform : Windows
OS Version : All
Packer / Protector : ConfuserEX 1.0 Modified

Description :

I am testing an anti de4dot and others ...
If possible I would like to know the process you have done.

Screenshot :

Holly shit.exe

[beginner1108]

I am a beginner of reversing like as you.

I wanna ask you. What is special point of you file than the origin version of ConfuserEx.

Your file can be very easy deobfuscated. And there are many tutorials similar with it.

You can find many articles and videos on here and  YOUTUBE by searching words "confuserex unpack".

I uploaded the deobfuscated file. It just only take 5 mins.  Currently it doesn't run, but I think it's full enough to analysis original code. 

Deob.exe

[NightBullet]

Thank you... I tryning to make any mod

[NightBullet]

All right

Edited November 11, 2017 by NightBullet

[beginner1108]

11 minutes ago, NightBullet said:

Thank you... I trying to make any mod

 

I've made several changes since then. File Update:

Holly shit.exe

What kind of changes did you apply?

Renamed only "koi" to "abo", or beside it, still any other changes?

Too easy!!!

This is not challenge, I think Challenge problems at least must be a little hard to study.

Deob2.exe

[Tanasittx]

koi2_patched-strings-cleaned.exe

no deobfuscate

[GeGe]

Holly shit-OK.exe

[Annie]

Unpacked.

Picture:

 

Unpack Download:

Holly shit-1 - Unpack.exe

[illuZion]

Steps :

1. manually removed compressor

2. manually removed anti tampering

3. used CounfuserEx unpacker

4. used de4dot

unpacked.exe

[Sakyamuni]

does it have a virus?