Exetools  

Go Back   Exetools > General > General Discussion

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 06-28-2021, 14:57
Mendax47 Mendax47 is online now
Family
 
Join Date: Jun 2016
Location: Earth..
Posts: 164
Rept. Given: 9
Rept. Rcvd 5 Times in 5 Posts
Thanks Given: 449
Thanks Rcvd at 210 Times in 82 Posts
Mendax47 Reputation: 5
Exclamation Unpack Agile.NET

i have a dll which is protected by Agile.Net. could anyone provide me the procedure to unpack the Agile.Net obfuscator....?

dll link: hXXXs://mega.nz/file/wo40zAgL#oRAwqdJInBuIBm9z8uj-R6sKN_0LbjKvKBbRRRAjq0c
Reply With Quote
  #2  
Old 06-28-2021, 17:09
congviet congviet is offline
Family
 
Join Date: Jun 2010
Location: Vi
Posts: 145
Rept. Given: 30
Rept. Rcvd 76 Times in 42 Posts
Thanks Given: 46
Thanks Rcvd at 49 Times in 27 Posts
congviet Reputation: 76
Quote:
Originally Posted by Mendax47 View Post
i have a dll which is protected by Agile.Net. could anyone provide me the procedure to unpack the Agile.Net obfuscator....?

dll link: hXXXs://mega.nz/file/wo40zAgL#oRAwqdJInBuIBm9z8uj-R6sKN_0LbjKvKBbRRRAjq0c
You can try:
1. Use ManagedJiterFr4 (Run in NetBox40) to decrypt methods
2. Use de4dot to remove delegates ,cflows and strings..
Reply With Quote
The Following User Says Thank You to congviet For This Useful Post:
Mendax47 (06-28-2021)
  #3  
Old 06-28-2021, 21:38
Apuromafo Apuromafo is offline
Family
 
Join Date: Nov 2010
Location: Chile
Posts: 106
Rept. Given: 22
Rept. Rcvd 26 Times in 12 Posts
Thanks Given: 154
Thanks Rcvd at 163 Times in 58 Posts
Apuromafo Reputation: 26
actually what you need is to devirtualize Agilet.Net, if what you want to do is not virtualized I can clean it for you, but if it is virtualized, I don't know how to do it yet
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



All times are GMT +8. The time now is 16:31.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX
( 1998 - 2021 )