Difficulty : 3
Language : .NET
Platform : Windows x32/x64
OS Version : Windows 7+
Packer / Protector : ConfuserEx Modified

Description :

Unpack and provide a quick overview of how you did it and what tools were used

 

CrackMe0.exe

 

Screenshot :

same as ConfuserEx, all tools should work

pass:

Spoiler

hovzcrawiybdtukexfqgsjlyar

 

CrackMe0-cleaned.exe

i don't know why string decryption is not working for me, anyway here are the main functions decrypted. The only modification is that you renamed koi to rb

 

Edit

i was doing something wrong while unpacking, now everything is decrypted correctly.

Edited August 26, 20187 yr by Ahmad_k

Pass:

Spoiler

hovzcrawiybdtukexfqgsjlyar

 

rb3-Unpacked.exe

Password:

Spoiler

hovzcrawiybdtukexfqgsjlyar

Steps :

1. manually removed anti tamper

2. manually decompressed the file

3. used confuserEx unpacker

4. use de4dot to finish the work

5. created a vs to find the password

CrackMe0 cleaned.exe

Edited September 16, 20195 yr by illuZion

Steps :

1. manually decompressed the file

2. manually removed anti tamper

3. used ConfuserEx unpacker v2

4. use de4dot to finish the work

rbkk-Cleaned.exe

Spoiler

 

1. Decompress using KoiVM Method [Renamed to "rb" in this case] :

Spoiler

2. Remove CFlow

3. Decrypt Constants

4. De4dot for renaming

5. Cfex Unpacker v2 to cleanup Junk

6. Done

 

done.exe

Anyone have link  tool cflow please up for me !