denisbiris on 10:29 AM 02/08/2020: THIS IS VIRUSED !
x0r19x91 on 1:52 AM 02/09/2020: lol I wrote it myself... This is no virus
mrT4ntr4 on 4:21 PM 02/09/2020: Hmm.. I doubt! @x0r19x91 can't u write a virus? lmao
x0r19x91 on 3:18 PM 02/10/2020: I can
mr_sandman on 9:48 PM 02/14/2020: What reverse software do y'all use?
Rimbalza on 9:41 AM 02/17/2020: https://www.virustotal.com/gui/file/7919f891e415eb24be7468cb1d2e48010239f40dcdccd8f4370bb0d9f55a41dd/detection
27 engines mark it as containing virus
jeffli6789 on 3:28 AM 02/18/2020: I have investigated this sample and it does not seem to contain a virus. It has a very clever design and I think it is underrated as level 2. This design might be the reason for it being flagged by AV engines. However, I cannot make a promise on this -- I am just saying my reverse engineering told me it is a real crackme rather than a virus.
jeffli6789 on 3:35 AM 02/18/2020: Hi mr_sandman, for static analysis I use Binary Ninja; for dynamic debugging I use x64dbg. And here is a list of tools, tutorials, etc. https://github.com/dsasmblr/game-hacking. Obviously, it is not only for game hacking.
x0r19x91 on 2:36 AM 02/22/2020: I guess the difficulty might be 3
x0r19x91 on 2:36 AM 02/22/2020: Did anyone solve it btw ?
JustMaaarc on 11:49 PM 02/22/2020: I have no Idea how to unpack something when this happends: http://twixy.cf/i/5vsqx059.png
since it only has a PE but the rest isn't there.
If anyone can help me bypass that kind of Obfuscation let me know.
PS: "Perfect would be if that's possible without having to use a different program. A De-obfuscator for that would be enough i think so"
Xor0 on 5:32 AM 02/23/2020: JustMaaarc - This isn't a C# exe so dnSpy will do you no good. x0r19x91, this is some cool stuff. I'm not so good with it yet. It is self-debugging, nanomites protection from what i can see so far. I'm still looking into it further trying to learn. Thank you for nice challenge. Is level 10 for me right now :-)
jeffli6789 on 8:29 AM 02/23/2020: @x0r19x91: I solved it and uploaded my submission yesterday. I like the design! thx!
x0r19x91 on 12:15 PM 02/23/2020: @jeffli6789 nice solution! The validation algorithm is actually a deterministic finite automaton and buf2 is the transition function
irishyogashirt on 8:12 PM 04/04/2020: I can't seem to figure this out, can't find many resources on solving self debugging crackmes :/