View Single Post
  #4  
Old 01-05-2014, 18:56
Black_Legion Black_Legion is offline
Friend
 
Join Date: May 2013
Posts: 22
Rept. Given: 7
Rept. Rcvd 5 Times in 4 Posts
Thanks Given: 40
Thanks Rcvd at 13 Times in 9 Posts
Black_Legion Reputation: 5
thank you

@Shub-Nigurrath
i think the exe is not packed, because i can see all the strings unencrypted and the hex patching works.
scanning with kanal 2.92 says: "Detected 50 crypto signatures" -> 46 CRC, 1 MD5, 1 SHA1, 1 SHA-256, 1 SHA-512

@gigaman
using IDA i can see "__security_check_cookie" around the function which i patched to bypass first check, is it something familiar?
Reply With Quote