Results 1 to 3 of 3

Thread: Yoda's Cryptor v 1.2 + UPX Packed Executable

  1. #1

    Post Yoda's Cryptor v 1.2 + UPX Packed Executable

    Greetings everyone,

    I am having trouble unpacking a file that is protected by UPX and then by Yoda's Cryptor v1.2.

    The Target: [Can't say really. I might face the wrath of the Mods! ]

    Protection: y0da's Cryptor v1.2

    [I found an old thread but the last post was in 2007 and I don't want to bring the dead back...]
    [http://www.woodmann.com/forum/showthread.php?10354-Yoda-s-Crypter-1-2]

    I unpacked the file using Olly and got the OEP at 0040A951. I dumped it using LordPE after correcting the ImageBase [Anti-Dump Defense]. Now the file won't run..........

    *Actually ignore this post, GIYF actually worked and it just gave me what I wanted*
    Last edited by DeXTeR.OrBiT; July 14th, 2012 at 14:01.
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  2. #2
    Hi and welcome.

    I didn't know that diablo's crackmes are packed.
    Do you have a link?

    Thank you.

    Regards
    darkelf
    I flout Chuck Norris, Spongebob barbecues underwater!

  3. #3

    I was suprised too.....

    Quote Originally Posted by Darkelf View Post
    Hi and welcome.

    I didn't know that diablo's crackmes are packed.
    Do you have a link?

    Thank you.

    Regards
    darkelf

    Sure, just goto http://kickme.to/diablo2oo2. It is the second crackme. Packed with UPX then yoda's crypter. I thinks its the only one though.

    *UPDATE: It looks like the crackme's are not there anymore. If you do want the yoda's cryptor v1.2 + UPX crackme, I will gladly upload it.

    Do you know where I could get a tutorial on Import Table rebuilding. I tried Google but it is giving me some tutorials that I cannot understand (Hooked DLL Calls)...I am still a n00b just starting of....

    Regards
    DeX
    Last edited by DeXTeR.OrBiT; July 14th, 2012 at 14:18.
    I promise that I have read the FAQ and tried to use the Search to answer my question.

Similar Threads

  1. Packed Executable but with Missing DLLs
    By live_dont_exist in forum Advanced Reversing and Programming
    Replies: 12
    Last Post: November 16th, 2011, 10:27
  2. Packed Malware - Double Packed?
    By vect0r in forum Malware Analysis and Unpacking Forum
    Replies: 26
    Last Post: August 7th, 2008, 06:13
  3. Yoda's Crypter 1.2
    By penguin0103 in forum Malware Analysis and Unpacking Forum
    Replies: 13
    Last Post: August 12th, 2007, 13:22
  4. Yoda's Protector 1.3
    By penguin0103 in forum Malware Analysis and Unpacking Forum
    Replies: 17
    Last Post: January 17th, 2007, 16:35
  5. How Packed files are Packed
    By naides in forum Malware Analysis and Unpacking Forum
    Replies: 3
    Last Post: February 11th, 2004, 23:33

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •