View Full Version : Problem with MoleBox unpacking
Fh_prg
September 29th, 2011, 11:44
Hello
I have a target that seems to be protected by MoleBox-VS , i have so many try to unpack but i got fail
Please some one help me to unpack this
thanks.
evaluator
October 4th, 2011, 10:04
if you run it and dump at runtime. then you will see , it is MSvb6 runtime and it's standart OEP is
at 401128: PUSH OFFSET 'vb5!'
now again start in debugger, set hardware BP at OEP and you can make "Full dump" using LordPE.
there is original import, but thunks are shuffled,
so resolve imports and fix them.
Fh_prg
October 5th, 2011, 05:42
Thank for reply , how did you unpack it ? Please a little tut ...
Thanks.
Powered by vBulletin® Version 4.2.2 Copyright © 2018 vBulletin Solutions, Inc. All rights reserved.