Static Enigma Virtual Box Unpacker by kao

[Sir.V65j]

Said by kao. Tuts4you.com site

I'm happy to present you a static unpacker for Enigma Virtual Box, versions 4.10-7.10 (latest at the moment). It can extract both virtualized files and registry keys. It will also "unpack" main executable.
EnigmaVBUnpacker takes very conservative approach. If something doesn't look right, it will stop with an error message. Your file is probably modified to prevent unpacking and there isn't much I can do about it.

Known issues that I am planning to look at:

Cannot detect EnigmaVB version for some files. Extraction will still work.
x64 (=PE32+) files are not supported;

Known issues I am NOT planning to fix:

External packages are not supported;
Files larger than 2GB are not supported;
Really old versions of Enigma Virtual Box are not supported;

Alternative tools and their problems:

https://github.com/EVBExtractor - supports only Enigma VB v6.60+, fails on compressed files larger than 64kb, doesn't support registry, doesn't fix main EXE, doesn't support virtual drives, requires Python.
https://forum.tuts4you.com/topic/26372-thinstall-dependancy-extractor/ - dynamic unpacker, doesn't fix main EXE, doesn't support registry.
http://nexenteam.net/index.php?option=com_content&view=article&id=14:enigma-virtual-box-dumper&catid=12&Itemid=125 - Enigma Virtual Box Dumper by Predator. Doesn't dump embedded files or registry. Some of the unpacked files were invalid in my tests. Requires .NET 4.0.

Reporting bugs:
If you found a bug and want me to fix it, the only way is to make a proper bug report in this thread. Please follow these simple steps:

Make sure you are using the latest version of EnigmaVBUnpacker. It's possible that the bug is already fixed.
Make sure this is not a known limitation mentioned above.
OK, you really found a bug. Please make a post in this thread, and:
describe what is wrong. Is some extracted file broken? Is some file missing? Does EnigmaVBUnpacker crash?
provide full and complete output from EnigmaVBUnpacker. Copy the text and use [code=auto:0] tags, DO NOT post screenshots.
provide link to your executable. Please upload it via multiupload.nl, DO NOT post it attachment (see board rules).

I will look at your bug report as soon as I have time. Please do not send me PMs or emails, and do not bump your posts up.

source:
https://forum.tuts4you.com/topic/35554-static-enigma-virtual-box-unpacker/

[DMichael]

its only extract or also unpack?

[Sir.V65j]

@DMichael:
read #1

It can extract both virtualized files and registry keys. It will also "unpack" main executable.

[DMichael]

it will unpack only main exectuable or also the extracted ones?

[Sir.V65j]

v0.11

-Fixes issue with unpacked .NET files showing "not a valid Win32 application" (reported by Extreme Coders);
-Fixes issue with overlay missing from unpacked main EXE (reported by Extreme Coders). Unpacked program may or may not work as expected, depends on what data are in overlay and how program accesses them.

[p4r4d0x]

hmmmm very good lets test some...

[kangalooj]

Is there any enigma detector?

[kangalooj]

The program craches with not enough memory error! I have a 600mb exe that want to extract!!!

It can recognize files in exe but error apears!

[Max]

Originally Posted by kangalooj

The program craches with not enough memory error! I have a 600mb exe that want to extract!!!

It can recognize files in exe but error apears!

Someone posted another method of extration tool in enigma forum, have you take alook there yet?

[BAHEK]

Enigma Virtual Box Unpacker 0.20

+ added support for x64 executables
+ recognition of EnigmaVB 7.20
* minor bugs fixed

Download:

[Apuromafo]

update 0.33
http://lifeinhex.com/static-enigma-virtual-box-unpacker-part-3/

[sirius]

Sounds good, will it a try

[Apuromafo]

v.0.34 http://lifeinhex.com/category/tools/
Improved EnigmaVB Unpacker

First of all, I fixed the error message. I also added detection and tested compatibility with the latest EnigmaVB v7.40. Hopefully, this will make users happier and less confused.

author: Kao
link:https://www.mediafire.com/?0qak9azuy71k9gt

[disauto]

EnigmaVBUnpacker v0.61

few minor fixes:

Now it can unpack Enigma Virtual Box versions 10.20 and 10.30;
Correctly detects some old and rare versions of Enigma Virtual Box;


https://mega.nz/file/pgo0kaAS#1g8DzQ8xMAg4ADh9qYvLodwO8UqO2tsPMDDgXjjTytc