Manual Unpacking Tutorial... | Manual UnPacking (MUP) of WinKript v1.0 |
Source Code... | None. |
Some Info about the Packer/Encrypter and Author... | Author: MrCrimson Homepage: http://www.multimania.com/mrcrimson/ Email: MrCrimson@bigfoot.com Size of Packer/Encrypter: 9.00 KB The Packer/Encrypter itself isn't Packed/Encrypted in any way. |
Author Words about the Packer/Encrypter... | He doesn't say much about the Packer/Encrypter ;) |
Features... | It has the option of making a Backup of the Target File. |
Special stuff the Decryption Routine uses... | None. |
The best API to Break on... | None. This Encrypter isn't using any API's in the Decryption Routine. |
Recognization of this Packer/Encrypter... | Check if the name of the last Section is ".wkt#" (# can be any number, depends on how much Sections there are with this name) You can also recognize some text that the Encrypter puts after the last Section it's: "WinKripT v1.0 by MrCrimson" |
Recognization Bytes... | 33 C0 8B B8 |
OEP Jump... | jmp OEP |