Exetools

Exetools (https://forum.exetools.com/index.php)
-   General Discussion (https://forum.exetools.com/forumdisplay.php?f=2)
-   -   unpack Confuser.Core 1.6.0 (https://forum.exetools.com/showthread.php?t=21331)

Nooboy 09-01-2025 23:03

unpack Confuser.Core 1.6.0
 
Does anyone know how to unpack Confuser.Core 1.6.0+447341964f?
I've tried many methods, but none of them work. Is there a public tool for this?

Why can't I find .FREE in the module?

any suggestions,Thanks.

ENCLU 09-06-2025 05:32

Hello! Have you tried de4dot? If so, what results did you get from there?

Nooboy 09-07-2025 11:19

1.dump
2.fix dump
3.ConfuserEx-Unpacker-v2.0 &Constants Decrypter
4.de4dot


ConfuserEx-Unpacker-v2.0 prompts an error
[$] Loading Module...
[$] Loading References...
[$] Detected: Confuser.Core 1.6.0+447341964f
[$] Anti Tamper Detected
[$] Anti Tamper Removed Successfully
[$] Cleaned Control Flow on 272 Methods
[$] Fixed proxy calls: 6749
[$] Removed proxy methods: 944
[$] Cleaned Control Flow on 2 Methods
[$] Cleaned Control Flow on 2 Methods
[$] Patched 5 Anti Invokes
[$] Cleaned Control Flow on 2 Methods
Error:
Could not load file or assembly 'DEMO123456, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null'. This assembly was compiled for a different processor.
at System.Reflection.RuntimeAssembly.nLoadImage(Byte[] rawAssembly, Byte[] rawSymbolStore, Evidence evidence, StackCrawlMark& stackMark, Boolean fIntrospection, Boolean fSkipIntegrityCheck, SecurityContextSource securityContextSource)
at System.Reflection.Assembly.Load(Byte[] rawAssembly)
at Unpacker.Core.Deobfuscators.Resource.ResourceDeobfuscator.Deobfuscate(UnpackerContext context) in D:\Documents\Visual Studio 2017\Projects\GitHub\ConfuserEx-Unpacker\Unpacker.Core\Deobfuscators\Resource\ResourceDeobfuscator.cs:line 40
at Unpacker.Core.UnpackerEngine.Run(UnpackerParameters parameters) in D:\Documents\Visual Studio 2017\Projects\GitHub\ConfuserEx-Unpacker\Unpacker.Core\UnpackerEngine.cs:line 38
Error:
Object reference not set to an instance of an object.
at Unpacker.Core.Utils.FindInstructionsNumber(MethodDef method, OpCode opCode, Object operand) in D:\Documents\Visual Studio 2017\Projects\GitHub\ConfuserEx-Unpacker\Unpacker.Core\Helpers\Utils.cs:line 33
at Unpacker.Core.Deobfuscators.AntiDebugDeobfuscator.Deobfuscate(UnpackerContext context) in D:\Documents\Visual Studio 2017\Projects\GitHub\ConfuserEx-Unpacker\Unpacker.Core\Deobfuscators\AntiDebugDeobfuscator.cs:line 18
at Unpacker.Core.UnpackerEngine.Run(UnpackerParameters parameters) in D:\Documents\Visual Studio 2017\Projects\GitHub\ConfuserEx-Unpacker\Unpacker.Core\UnpackerEngine.cs:line 38
[$] Removed 1 Attributes
[$] Cleaning unused methods...
[$] Writing Module...
[$] Saving Module...

CodeCracker 11-02-2025 23:12

Quote:

Could not load file or assembly 'DEMO123456, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null'. This assembly was compiled for a different processor.
This is a 32 bits/64 bits mismatch... Can you share the target?


All times are GMT +8. The time now is 13:47.

Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2026, vBulletin Solutions, Inc.
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX