Exetools  

Go Back   Exetools > General > General Discussion

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 05-01-2020, 10:15
jonwil jonwil is offline
VIP
 
Join Date: Feb 2004
Posts: 313
Rept. Given: 2
Rept. Rcvd 18 Times in 6 Posts
Thanks Given: 1
Thanks Rcvd at 34 Times in 23 Posts
jonwil Reputation: 18
help deobfuscating .net binary

I have a .net binary that wont decompile with any .NET decompile tools I try and wont deobfuscate with de4dot, de4dot-cex or any other .NET deobfuscation tools I try.
Can anyone tell me how I can deobfuscate and decompile this?
Attached Files
File Type: 7z BetterSniper.7z (116.4 KB, 4 views)
Reply With Quote
  #2  
Old 05-01-2020, 11:27
congviet congviet is offline
Family
 
Join Date: Jun 2010
Location: Vi
Posts: 137
Rept. Given: 30
Rept. Rcvd 76 Times in 42 Posts
Thanks Given: 33
Thanks Rcvd at 46 Times in 24 Posts
congviet Reputation: 76
this tool protected by custom confuserex. You can try confuserex dynamic unpacker. Or dump koi module then use de4dot.
Reply With Quote
  #3  
Old 05-01-2020, 14:09
jonwil jonwil is offline
VIP
 
Join Date: Feb 2004
Posts: 313
Rept. Given: 2
Rept. Rcvd 18 Times in 6 Posts
Thanks Given: 1
Thanks Rcvd at 34 Times in 23 Posts
jonwil Reputation: 18
I tried https://gitlab.com/The-Real-TechLord/ConfuserEx-Unpacker but that failed with an error "compressor failed to remove".
And I can't figure out how to dump the koi module.
Reply With Quote
  #4  
Old 05-02-2020, 09:13
congviet congviet is offline
Family
 
Join Date: Jun 2010
Location: Vi
Posts: 137
Rept. Given: 30
Rept. Rcvd 76 Times in 42 Posts
Thanks Given: 33
Thanks Rcvd at 46 Times in 24 Posts
congviet Reputation: 76
This is unpacked file
Attached Files
File Type: rar Unpacked.rar (15.1 KB, 4 views)
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



All times are GMT +8. The time now is 12:04.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX
( 1998 - 2020 )