PDA

View Full Version : [HELP-UnpackMe] .DLL with UPolyX v0.5 [Overlay]


goddlikef
02-23-2011, 12:01 AM
Hey!

I have a simple .DLL file which is protected by UPolyX v0.5 [Overlay]
I think it's very easy to unpack it, but I don't know how to unpack a .DLL successfully.
Unpacking a .EXE file is not a problem for me.

I tried these Unpackers:
GUnPacker.v0.4
QuickUnpack.2.3.7
RL!dePacker v1.5

I also tried it with Olly but I always get error's...

Take a look into it and help me please.

http://npshare.de/files/eba276f9/UnpackMe_UPolyX-0.5.dll

ac!d
02-23-2011, 10:20 AM
Scanning -> .\UnpackMe_UPolyX-0.5.dll
File Type : 32-Bit Dll (Subsystem : Win GUI / 2), Size : 305152 (04A800h) Byte(s)
-> File has 51712 (0CA00h) bytes of appended data starting at offset 03DE00h
[File Heuristics] -> Flag : 00000000000001001100000000000100 (0x0004C004)
[CompilerDetect] -> Visual C++ 10.0 (Visual Studio 2010)
[!] File appears to have no protection or is using an unknown protection
- Scan Took : 0.172 Second(s) [0000000ACh tick(s)]

only reference here is the IsDebuggerPresent api... the file is not packed in any way.

BfoX
02-23-2011, 10:32 AM
he is not packed =)

goddlikef
02-23-2011, 06:17 PM
Oh yes, it's not packed, it was a false detection =)
thanks.