Hi all i'm new on this forum and i really need you're help (sorry for my bad english)
let me introduce my problem :
in few days ago i tried to crack a keylogger to see how he was made
and i analysed and found this software was packed by 3 packers the number one is called enigma protector 5.x
the second packer is called dnguard (yeah dnguard a very old packer)
the third packer is called "appfuscator"
so i successfully bypassed the enigma protection and now there is my problem
"DNGUARD" this packer is old and he seems to be good as far as i could see
so i googled how to unpack this and i found nothing i just found one unpacker made by "death"
and this tool upgraded and fixed by codecracker
so i downloaded the codecracker version but now i have a huge problem the unpacker returns a error when i want to unpack my keylogger
after this error the program won't continue
so i searched for a fixed version of this problem and i found some links but all links where the uploaded fixed version are dead or make this error
obfuscated code :
all strings are encrypted by this message "error dnguard runtime library not loaded"
after few days i unpacked and roughly "decrypted" appfuscator and i got this:
(excerpt of code)
as you can see it can be modifiable and readable but now i have my biggest problem the exe is not launching... why ? because the dnguard class use a dll named Runtime.dll to startup the exe and verify if all is good :
(to know that with appfuscator I couldn't see that )
i tried to delete the class not working to modify the dll import and delete the error or fix it not working or add the dll inside the exe not working too so what can i do ?
if someone can help me
here is my 3 differents exe with all ressources : (execute it sandboxed or in a vm)
Thanks !
PS: i'm a begginer so it's possible if i made few errors or bad things
let me introduce my problem :
in few days ago i tried to crack a keylogger to see how he was made
and i analysed and found this software was packed by 3 packers the number one is called enigma protector 5.x
the second packer is called dnguard (yeah dnguard a very old packer)
the third packer is called "appfuscator"
so i successfully bypassed the enigma protection and now there is my problem
"DNGUARD" this packer is old and he seems to be good as far as i could see
so i googled how to unpack this and i found nothing i just found one unpacker made by "death"
and this tool upgraded and fixed by codecracker
so i downloaded the codecracker version but now i have a huge problem the unpacker returns a error when i want to unpack my keylogger
after this error the program won't continue
so i searched for a fixed version of this problem and i found some links but all links where the uploaded fixed version are dead or make this error
obfuscated code :
all strings are encrypted by this message "error dnguard runtime library not loaded"
after few days i unpacked and roughly "decrypted" appfuscator and i got this:
(excerpt of code)
as you can see it can be modifiable and readable but now i have my biggest problem the exe is not launching... why ? because the dnguard class use a dll named Runtime.dll to startup the exe and verify if all is good :
(to know that with appfuscator I couldn't see that )
i tried to delete the class not working to modify the dll import and delete the error or fix it not working or add the dll inside the exe not working too so what can i do ?
if someone can help me
here is my 3 differents exe with all ressources : (execute it sandboxed or in a vm)
Thanks !
PS: i'm a begginer so it's possible if i made few errors or bad things
