Exetools  

Go Back   Exetools > General > Community Tools

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 10-04-2024, 17:15
CodeCracker CodeCracker is offline
VIP
 
Join Date: Jun 2011
Posts: 577
Rept. Given: 32
Rept. Rcvd 516 Times in 191 Posts
Thanks Given: 26
Thanks Rcvd at 2,627 Times in 461 Posts
CodeCracker Reputation: 500-699 CodeCracker Reputation: 500-699 CodeCracker Reputation: 500-699 CodeCracker Reputation: 500-699 CodeCracker Reputation: 500-699 CodeCracker Reputation: 500-699
VMProtectNoDelegates (.NET)

VMProtectNoDelegates (.NET):
- Clean delegates of VMProtect .NET

You will need to use DeMutation first:
https://github.com/xlfj5211/DeMutation
https://forum.exetools.com/showthread.php?t=21105
https://forum.tuts4you.com/topic/45162-demutation-vmprotect-net/

I only tested on 1 sample so let me know if you find bugs.
Attached Files
File Type: rar VMProtectNoDelegates.rar (465.5 KB, 31 views)

Last edited by CodeCracker; 10-04-2024 at 19:36.
Reply With Quote
The Following User Gave Reputation+1 to CodeCracker For This Useful Post:
Dr.FarFar (10-06-2024)
The Following 13 Users Say Thank You to CodeCracker For This Useful Post:
ahmadmansoor (10-16-2024), besoeso (10-05-2024), blue_devil (10-04-2024), Doit (10-05-2024), Dr.FarFar (10-06-2024), Gyrus (10-06-2024), MarcElBichon (10-04-2024), niculaita (10-05-2024), NoneForce (10-05-2024), SofTw0rm (10-05-2024), tonyweb (10-06-2024), uranus64 (10-04-2024), user_hidden (10-04-2024)
  #2  
Old 10-05-2024, 01:31
Sh4DoVV Sh4DoVV is offline
Friend
 
Join Date: Sep 2023
Posts: 31
Rept. Given: 1
Rept. Rcvd 3 Times in 3 Posts
Thanks Given: 12
Thanks Rcvd at 66 Times in 11 Posts
Sh4DoVV Reputation: 3
Hi CodeCracker
Please upload in mega or other uploading site
Reply With Quote
  #3  
Old 10-05-2024, 17:26
JMP-JECXZ JMP-JECXZ is offline
Friend
 
Join Date: Mar 2017
Posts: 104
Rept. Given: 0
Rept. Rcvd 4 Times in 3 Posts
Thanks Given: 14
Thanks Rcvd at 123 Times in 59 Posts
JMP-JECXZ Reputation: 4
mega link:
Code:
https://mega.nz/file/jkUURIBC#F9yiaqB4-uIadimY_9nubGZUOh49vZDQg-m8R5Kjs-Y
DeMutation: https://mega.nz/file/Hws3QRyA#vZ-LMZDpMOeAKcc2zK_I4Oo53ysgvUghU6FPTXQBtEA
Reply With Quote
The Following User Says Thank You to JMP-JECXZ For This Useful Post:
Doit (10-07-2024)
  #4  
Old 10-05-2024, 19:59
Samoray Samoray is offline
Friend
 
Join Date: Oct 2023
Posts: 3
Rept. Given: 0
Rept. Rcvd 1 Time in 1 Post
Thanks Given: 2
Thanks Rcvd at 1 Time in 1 Post
Samoray Reputation: 1
Quote:
Originally Posted by Sh4DoVV View Post
Hi CodeCracker
Please upload in mega or other uploading site
CodeCracker shares his work on the tuts4you forum also.
You can head over there to download all the same attachments instead of asking for a re-upload here...
That's the fastest way.
Reply With Quote
The Following User Gave Reputation+1 to Samoray For This Useful Post:
CodeCracker (10-06-2024)
The Following User Says Thank You to Samoray For This Useful Post:
CodeCracker (10-06-2024)
  #5  
Old 01-21-2025, 21:02
CodeCracker CodeCracker is offline
VIP
 
Join Date: Jun 2011
Posts: 577
Rept. Given: 32
Rept. Rcvd 516 Times in 191 Posts
Thanks Given: 26
Thanks Rcvd at 2,627 Times in 461 Posts
CodeCracker Reputation: 500-699 CodeCracker Reputation: 500-699 CodeCracker Reputation: 500-699 CodeCracker Reputation: 500-699 CodeCracker Reputation: 500-699 CodeCracker Reputation: 500-699
VMProtectNoDelegates_Fixed1

VMProtectNoDelegates_Fixed1:
What's new:
- Added DynamicILInfo checkbox;
- Added "No Environment.Exit" to Patch Environment.Exit(int) and "Patch HWID.IsCorrect" so will work for this target
https://forum.tuts4you.com/topic/43262-vmprotect-v351 when the message is showed just click Ok, I choose not to patch the message showing.
- Added "Preserve All" checkbox to preserve tables.
Attached Files
File Type: rar VMProtectNoDelegates_Fixed1.rar (1.06 MB, 26 views)
Reply With Quote
The Following 2 Users Gave Reputation+1 to CodeCracker For This Useful Post:
MarcElBichon (01-21-2025), wx69wx2023 (01-22-2025)
The Following 7 Users Say Thank You to CodeCracker For This Useful Post:
Apuromafo (01-23-2025), darkBLACK (01-25-2025), SofTw0rm (01-22-2025), user_hidden (01-21-2025), wilson bibe (01-22-2025), wx69wx2023 (01-22-2025), Zeokat (01-22-2025)
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



All times are GMT +8. The time now is 16:54.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( 1998 - 2025 )