Exetools  

Go Back   Exetools > General > General Discussion

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 05-01-2020, 10:15
jonwil jonwil is offline
VIP
 
Join Date: Feb 2004
Posts: 387
Rept. Given: 2
Rept. Rcvd 21 Times in 9 Posts
Thanks Given: 2
Thanks Rcvd at 65 Times in 34 Posts
jonwil Reputation: 21
help deobfuscating .net binary

I have a .net binary that wont decompile with any .NET decompile tools I try and wont deobfuscate with de4dot, de4dot-cex or any other .NET deobfuscation tools I try.
Can anyone tell me how I can deobfuscate and decompile this?
Attached Files
File Type: 7z BetterSniper.7z (116.4 KB, 6 views)
Reply With Quote
  #2  
Old 05-01-2020, 11:27
congviet congviet is offline
Family
 
Join Date: Jun 2010
Location: Vi
Posts: 151
Rept. Given: 30
Rept. Rcvd 76 Times in 42 Posts
Thanks Given: 56
Thanks Rcvd at 52 Times in 30 Posts
congviet Reputation: 76
this tool protected by custom confuserex. You can try confuserex dynamic unpacker. Or dump koi module then use de4dot.
Reply With Quote
  #3  
Old 05-01-2020, 14:09
jonwil jonwil is offline
VIP
 
Join Date: Feb 2004
Posts: 387
Rept. Given: 2
Rept. Rcvd 21 Times in 9 Posts
Thanks Given: 2
Thanks Rcvd at 65 Times in 34 Posts
jonwil Reputation: 21
I tried https://gitlab.com/The-Real-TechLord/ConfuserEx-Unpacker but that failed with an error "compressor failed to remove".
And I can't figure out how to dump the koi module.
Reply With Quote
  #4  
Old 05-02-2020, 09:13
congviet congviet is offline
Family
 
Join Date: Jun 2010
Location: Vi
Posts: 151
Rept. Given: 30
Rept. Rcvd 76 Times in 42 Posts
Thanks Given: 56
Thanks Rcvd at 52 Times in 30 Posts
congviet Reputation: 76
This is unpacked file
Attached Files
File Type: rar Unpacked.rar (15.1 KB, 4 views)
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Binary patcher available? Stingered General Discussion 10 04-08-2018 12:14
Starting .net deobfuscating yologuy General Discussion 9 04-29-2017 16:38


All times are GMT +8. The time now is 18:59.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( 1998 - 2024 )