Exetools  

Go Back   Exetools > General > General Discussion

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 11-20-2019, 19:32
Mynotos Mynotos is offline
Friend
 
Join Date: Mar 2018
Posts: 9
Rept. Given: 0
Rept. Rcvd 0 Times in 0 Posts
Thanks Given: 1
Thanks Rcvd at 2 Times in 2 Posts
Mynotos Reputation: 0
Replacing ECDSA in Target (arma)

Hello Guys,

i need some help or information what steps i missing . First i must say i'm not a unpacking Professional. I have a Target with Armadillo protected and bruteforced already the cert with Mr.Exodias Akt Tool but i'm trying to replace
the ECDSA Signature.

i have the Base & Replace Code but how to use thie replace code now ??

I can't find either the OEP over x64dbg and Armageddon unpacks it but the binary is not runnable maybe of invalid OEP.

The binary has Debug Blocker no CopyMem..

Any help of Information about unpacking/replacing the signature would be good
Reply With Quote
  #2  
Old 11-20-2019, 23:26
Mynotos Mynotos is offline
Friend
 
Join Date: Mar 2018
Posts: 9
Rept. Given: 0
Rept. Rcvd 0 Times in 0 Posts
Thanks Given: 1
Thanks Rcvd at 2 Times in 2 Posts
Mynotos Reputation: 0
Quote:
Originally Posted by Mynotos View Post
Hello Guys,

i need some help or information what steps i missing . First i must say i'm not a unpacking Professional. I have a Target with Armadillo protected and bruteforced already the cert with Mr.Exodias Akt Tool but i'm trying to replace
the ECDSA Signature.

i have the Base & Replace Code but how to use thie replace code now ??

I can't find either the OEP over x64dbg and Armageddon unpacks it but the binary is not runnable maybe of invalid OEP.

The binary has Debug Blocker no CopyMem..

Any help of Information about unpacking/replacing the signature would be good

Ok Found out how to replace the ECDSA, but the programm wont run even if inline the base code into the target.. without the replace code... does it mean it has additonal protection or are some values wrong ?
Reply With Quote
  #3  
Old 11-21-2019, 23:19
Mynotos Mynotos is offline
Friend
 
Join Date: Mar 2018
Posts: 9
Rept. Given: 0
Rept. Rcvd 0 Times in 0 Posts
Thanks Given: 1
Thanks Rcvd at 2 Times in 2 Posts
Mynotos Reputation: 0
Can be closed got all
Reply With Quote
  #4  
Old 11-22-2019, 00:49
bolo2002 bolo2002 is offline
VIP
 
Join Date: Apr 2002
Posts: 614
Rept. Given: 111
Rept. Rcvd 14 Times in 13 Posts
Thanks Given: 217
Thanks Rcvd at 238 Times in 152 Posts
bolo2002 Reputation: 14
Quote:
Originally Posted by Mynotos View Post
Can be closed got all
you can even do a tutorial for newbie
__________________
I like this forum!
Reply With Quote
The Following User Says Thank You to bolo2002 For This Useful Post:
deepzero (11-22-2019)
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Armadillo ECDSA-113 contextrax General Discussion 75 12-07-2022 15:37
Modifying/replacing class in .NET binary jonwil General Discussion 9 08-22-2020 12:49


All times are GMT +8. The time now is 17:25.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( 1998 - 2024 )