Jump to content
Tuts 4 You
Sign in to follow this  
seksiBoi

Corona Obfuscator

Recommended Posts

seksiBoi
Posted (edited)

Language : C#
Difficulty : idk
Platform : Windows
Packer/obfuscator :  COrona_obfuscator

Description :

Want To see if the protections is good enough. Corona_Vm is basically SOme one modded KOIVM idk if its good so yeah 

ScreenSHot

Spoiler

image.png.273a578f923127367713f7b80c558dd1.png 

 

VT :https://www.virustotal.com/gui/file/892dccbe1089f8b59827c1199f61cd40e8f74b9642b9965648d457dfd45fe425/detection
DL : https://bayfiles.com/n8U0jdkbo9/ConsoleApp2_exe

ConsoleApp2.zip

Edited by CodeExplorer (see edit history)

Share this post


Link to post
localhost0
Posted (edited)

hmm nice load method :) thnx bro

Edited by mamo434376 (see edit history)

Share this post


Link to post
kuri

That's MemeVM

Share this post


Link to post
TobitoFatito
41 minutes ago, CodeExplorer said:

nope just checked it some koivm with junk added

Share this post


Link to post
Washi
Posted (edited)

Very mature choice for username and password. 😑

Spoiler

user: HattanisGAy

pass: Noone ISgay

Tutorial:

Spoiler

No need for unpacking. Everything is visible in the debugger:

Tutorial using WinDBG:

  • Run program without debugger
  • Attach WinDBG, load SOS extension.
  • Break execution, !dumpheap -strings. Create a copy of the output
  • Continue execution, Enter random username and pasword.
  • Break execution, !dumpheap -strings again. Notice string "HattanisGAy" is added. Must be username
  • repeat previous two steps, but this time fill in correct username. Observe password.

Tutorial using dnSpy:

  • Run program without debugger
  • Attach dnSpy.
  • Think of a username (e.g. "washi") and password (e.g. "1234") combi
  • Add breakpoint on String.Equals(string a, string b) with condition a == "washi" || b == "washi"
  • Continue execution, enter random user-pass
  • Breakpoint hits, observe correct username.
  • Do the same with password.

 

Edited by Washi
Added missing words. (see edit history)
  • Like 2
  • Thanks 2

Share this post


Link to post

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
Sign in to follow this  
×
×
  • Create New...