Exetools - help deobfuscating .net binary

Exetools (https://forum.exetools.com/index.php)

- General Discussion (https://forum.exetools.com/forumdisplay.php?f=2)

- - help deobfuscating .net binary (https://forum.exetools.com/showthread.php?t=19511)

jonwil

05-01-2020 10:15

help deobfuscating .net binary

1 Attachment(s)

I have a .net binary that wont decompile with any .NET decompile tools I try and wont deobfuscate with de4dot, de4dot-cex or any other .NET deobfuscation tools I try.
Can anyone tell me how I can deobfuscate and decompile this?

congviet

05-01-2020 11:27

this tool protected by custom confuserex. You can try confuserex dynamic unpacker. Or dump koi module then use de4dot.

jonwil

05-01-2020 14:09

I tried https://gitlab.com/The-Real-TechLord/ConfuserEx-Unpacker but that failed with an error "compressor failed to remove".
And I can't figure out how to dump the koi module.

congviet

05-02-2020 09:13

1 Attachment(s)

This is unpacked file

All times are GMT +8. The time now is 14:41.