Jump to content
View in the app

A better way to browse. Learn more.
Tuts 4 You

A full-screen app on your home screen with push notifications, badges and more.

To install this app on iOS and iPadOS
  1. Tap the Share icon in Safari
  2. Scroll the menu and tap Add to Home Screen.
  3. Tap Add in the top-right corner.
To install this app on Android
  1. Tap the 3-dot menu (⋮) in the top-right corner of the browser.
  2. Tap Add to Home screen or Install app.
  3. Confirm by tapping Install.

PandaObfuscator, with custom VM

CodeOfDark
CodeOfDark
in CrackMe

Featured Replies

Posted

Difficulty : 2-3
Language : .NET
Platform : Windows
OS Version : Windows7+
Packer / Protector : PandaObfuscator (Modded Confuser) with Custom VM

Description :

Just basic UnpackMe, want to see if my obfuscator good/bad

Screenshot :

image.png.62b851da8d9494b35a6bcf1106e63030.png

GetMe.7z

  • 2 months later...

I'm cannot resolve the challenge yet, it's indeed very hard (at least for me). I would like just to know whether I've got the correct partial result or not.

I've managed to "dump" the key checking procedure, which locates on several non-contiguous pages (!?). The attached image is a part of it (I don't know how to capture all the function). I've found that there is a loop which reads each chararacter (input key is a wide string, each char is 2 bytes) by the instruction 

movz ecx, [eax + ebx * 2]

the character is then checked with several values (e.g. "-", etc). But I still cannot go further.

panda_obfuscator.png

Edited by tathanhdinh
code reformat

Unpacked

Use any long key to pass checks.

GetMe_unp.zip

    •
    • Like 4
    • Haha 1

    WTF, I've gone seriously wrong with this challenge 🤐 .

    Excellent work, @SHADOW_UA

    Edited by tathanhdinh

    • Author

    Gj @SHADOW_UA

    • 3 weeks later...
    On 1/8/2019 at 9:47 PM, SHADOW_UA said:

    Unpacked

    Use any long key to pass checks.

    GetMe_unp.zip

     

    Any info of how you did it?

    Edited by Zyhes

    • 1 year later...

    I'm sure I'm late to the party,the password is:VGhpcyBTaW1wbGUgQ3JhY2tNZQ0kQnkgQ29kZU9mRGFyaw==

    • Haha 1
    • 2 months later...

    can u help me this method :(

    sorry my english is bad
    exe and runtime.dll
    image.png.1a2001d3c20d4cccd8d07523973c7e77.pngimage.png.1d88b2e1a3fd02226bf206d4bf122ca5.png

    • 6 months later...
    On 9/5/2020 at 10:27 PM, tungtruong20xx said:

    can u help me this method :(

    sorry my english is bad
    exe and runtime.dll
    image.png.1a2001d3c20d4cccd8d07523973c7e77.pngimage.png.1d88b2e1a3fd02226bf206d4bf122ca5.png

    give me the file

    Edited by deluxe

    Create an account or sign in to comment

    Go to topic listing

    Configure browser push notifications
    Chrome (Android)
    1. Tap the lock icon next to the address bar.
    2. Tap Permissions → Notifications.
    3. Adjust your preference.
    Chrome (Desktop)
    1. Click the padlock icon in the address bar.
    2. Select Site settings.
    3. Find Notifications and adjust your preference.