View Single Post
  #1  
Old 05-17-2018, 06:37
p4r4d0x p4r4d0x is offline
Friend
 
Join Date: Jul 2012
Location: https://www.youtube.com/watch?v=GoCOg8ZzUfg
Posts: 142
Rept. Given: 95
Rept. Rcvd 21 Times in 11 Posts
Thanks Given: 397
Thanks Rcvd at 146 Times in 64 Posts
p4r4d0x Reputation: 21
Lightbulb ASprotect Problem

Scanning -> C:\Documents and Settings\rea\Desktop\TunnelCAD.lnk
Link Resolved to -> C:\Program Files\IQSoft\TunnelCAD\1.7\TunnelCAD.exe
File Type : 32-Bit Exe (Subsystem : Win GUI / 2), Size : 785920 (0BFE00h) Byte(s)
[File Heuristics] -> Flag : 00000000000000001100000000100010 (0x0000C022)
[!] ASProtect SKE v2.3 - v2.5 detected !


And with Peid : ASProtect 1.33 - 2.1 Registered -> Alexey Solodovnikov *

and from vera2 : [TunnelCAD], [1.07.0006],
[2.3 build 06.26 Beta], [name].

I tried to unpack it with all scripts for Asprotect ... No Chance!
I tried with Winxp with Decomas 1.7 beta + ollydb Codedoctor
and is unpacked BUT the problem is that the application runs and sends an error 53 ( is writed on vb5!) and then kill it self!

Then i start back again scripting and i found that there is an issue at the IAT
you gone see that with the scripts it gona send you IAT = 401334 VA = 1000 and SIZE = 150 and when you go with the import fixer Dosent find it valid!!!


Any suggestions?

Last edited by p4r4d0x; 05-17-2018 at 06:56.
Reply With Quote