InsaneFIDO's InsaneFIDO's UnWrap3
| Download UnWrap3.zip, 207 kb (password: crackmes.de) Browse contents of UnWrap3.zip This is my latest attempt at a CrackMe. Once again it is very unlikely to tax the ingenuity of the more experienced reversers. I have called it an UnWrapMe again although unlike my previous offering the 'wrapped' code is inside the wrapper as opposed to a seperate file. The purpose of this small exercise is to rebuild a close approximation to the original executable, with little or no trace left of the wrapper, thus is very similar to unpacking.
Difficulty: 4 - Needs special knowledge | RatingWaiting for at least 3 votes View profile of InsaneFIDO » |
Solutions
There are no solutions to this crackme yet. Have you solved it? Please write a tutorial and submit it here!
Discussion and comments
| DizzY_D 08. Jun 2009 | Not running @ Vista x64 :( |
|---|---|
| DigitalAcid 08. Jun 2009 | "The PC I used had on it windows XP with SP3 and program also ran on XPSP2 under VMWare. It is highly unlikely that this will work on Vista." "Platform: Windows 2000/XP only" So yeah, probably doesn't work on Vista =). |
| tony 09. Jun 2009 | very intresting |
| tony 09. Jun 2009 | o! the tlscallback is very interesting . the size of tls table is zero. |
| tony 09. Jun 2009 | no! not running in windows xp sp3 |
| InsaneFIDO Author 11. Jun 2009 | I have been told by two people that on their PCs sometimes it runs and sometimes it does not (XPSP2 & XPSP3). Why this should be I do not know. |
| simonzack Moderator 15. Jun 2009 | does not work on mine, however I'll try to find out problem I pm'ed u thanks again for nice unpackme |
| DisasmDisease 15. Jun 2009 | My Antivir says its a trojan!!! |
| InsaneFIDO Author 15. Jun 2009 | My other UnWrapME was listed as a trojan by AVs. I sent very scathing emails to AV companies after that. Perhaps they just do not like me. |
| EvOlUtIoN 26. Jun 2009 | As you know, i solved it some time ago...but too lazy to write a tut, goto snd forum for unwrapped. Anyway i think that 4 as difficulty is too much, i done it in less than an hour. |
| simonzack Moderator 27. Jun 2009 | heh, that's quite fast did you analyze the whole thing or just memory dump? cause IAT is kinda easy to fix and oep easy to find |
| EvOlUtIoN 27. Jun 2009 | Not analyzed all, but antidebug was quite interesting, i only took the fastest way to obtain a working unpacked file. |
You may leave your comment, thoughts and discuss this crackme with other reversers here.
Acting childish will not be tolerated.
HTML and such will be left as-is, so don't try.