Jump to content
Tuts 4 You

Corona Obfuscator

Go to solution Solved by Washi,

Recommended Posts

Language : C#
Difficulty : idk
Platform : Windows
Packer/obfuscator :  COrona_obfuscator

Description :

Want To see if the protections is good enough. Corona_Vm is basically SOme one modded KOIVM idk if its good so yeah 





VT :https://www.virustotal.com/gui/file/892dccbe1089f8b59827c1199f61cd40e8f74b9642b9965648d457dfd45fe425/detection
DL : https://bayfiles.com/n8U0jdkbo9/ConsoleApp2_exe


Edited by CodeExplorer
Link to comment
Share on other sites

  • 2 weeks later...
  • Solution

Very mature choice for username and password. 😑


user: HattanisGAy

pass: Noone ISgay



No need for unpacking. Everything is visible in the debugger:

Tutorial using WinDBG:

  • Run program without debugger
  • Attach WinDBG, load SOS extension.
  • Break execution, !dumpheap -strings. Create a copy of the output
  • Continue execution, Enter random username and pasword.
  • Break execution, !dumpheap -strings again. Notice string "HattanisGAy" is added. Must be username
  • repeat previous two steps, but this time fill in correct username. Observe password.

Tutorial using dnSpy:

  • Run program without debugger
  • Attach dnSpy.
  • Think of a username (e.g. "washi") and password (e.g. "1234") combi
  • Add breakpoint on String.Equals(string a, string b) with condition a == "washi" || b == "washi"
  • Continue execution, enter random user-pass
  • Breakpoint hits, observe correct username.
  • Do the same with password.


Edited by Washi
Added missing words.
  • Like 2
  • Thanks 2
Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Create New...