PDA

View Full Version : Which obfuscator is being used?

rongchaua
06-08-2008, 03:36 AM
Hi all,
I have a file which is obfuscated but I do not know which obfuscator did that work.
This is link to file. http://www.box.net/shared/26j4qhk68c

I would like to know the name of obfuscator so that I can name my tool which deobfuscates it. ;)).

Thank you.
rca.
UFO-Pu55y
06-08-2008, 04:04 AM
Hi all,
I have a file which is obfuscated but I do not know which obfuscator did that work.
This is link to file. http://www.box.net/shared/26j4qhk68c

I would like to know the name of obfuscator so that I can name my tool which deobfuscates it. ;)).

Thank you.
rca.
lolol
had the same question with another target yesterday
L_0000: br L_0007
L_0005: pop
L_0006: ldc.i4.0
L_0007: blahblah
== NET Reactor

Kurapica ;)
rongchaua
06-08-2008, 05:15 AM
@UFO : I don't understand what you mean. Is that target obfuscated by .Net Reactor?
UFO-Pu55y
06-08-2008, 06:15 AM
Yea it's 100% net reactor style :)
rongchaua
06-08-2008, 09:26 AM
Thank you UFO. I can start to write now my tool. ;)).