Cheat Engine Forum Index Cheat Engine
The Official Site of Cheat Engine
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 


My second crackme

 
Post new topic   Reply to topic    Cheat Engine Forum Index -> General programming -> Crackmes
View previous topic :: View next topic  
Author Message
Jesper
Grandmaster Cheater Supreme
Reputation: 9

Joined: 21 Feb 2007
Posts: 1156

PostPosted: Sun Jan 25, 2009 5:39 pm    Post subject: My second crackme Reply with quote

Ok some of you may have tried my last "crackme" and know that it failed, this one is harder though.

Provide patch or password.

Virus scan:
Code:

Antivirus;Version;Last Update;Result
a-squared;4.0.0.73;2009.01.25;-
AhnLab-V3;5.0.0.2;2009.01.25;-
AntiVir;7.9.0.60;2009.01.25;TR/Crypt.XPACK.Gen
Authentium;5.1.0.4;2009.01.25;-
Avast;4.8.1281.0;2009.01.25;-
AVG;8.0.0.229;2009.01.25;Win32/PolyCrypt
BitDefender;7.2;2009.01.26;Trojan.Patched.CM
CAT-QuickHeal;10.00;2009.01.24;(Suspicious) - DNAScan
ClamAV;0.94.1;2009.01.25;-
Comodo;946;2009.01.25;-
DrWeb;4.44.0.09170;2009.01.26;Trojan.Packed.494
eSafe;7.0.17.0;2009.01.25;-
eTrust-Vet;31.6.6325;2009.01.24;-
F-Prot;4.4.4.56;2009.01.25;-
F-Secure;8.0.14470.0;2009.01.25;Suspicious:W32/Malware!Gemini
Fortinet;3.117.0.0;2009.01.25;-
GData;19;2009.01.26;Trojan.Patched.CM
Ikarus;T3.1.1.45.0;2009.01.25;-
K7AntiVirus;7.10.604;2009.01.24;-
Kaspersky;7.0.0.125;2009.01.26;-
McAfee;5506;2009.01.25;-
McAfee+Artemis;5506;2009.01.25;-
Microsoft;1.4205;2009.01.25;Trojan:Win32/Zbot.BU
NOD32;3799;2009.01.26;-
Norman;5.93.01;2009.01.23;-
nProtect;2009.1.8.0;2009.01.23;Trojan.Patched.CM
Panda;9.5.1.2;2009.01.25;-
PCTools;4.4.2.0;2009.01.25;-
Prevx1;V2;2009.01.26;-
Rising;21.13.42.00;2009.01.23;Packer.Win32.Undef.a
SecureWeb-Gateway;6.7.6;2009.01.25;Trojan.Crypt.XPACK.Gen
Sophos;4.37.0;2009.01.25;-
Sunbelt;3.2.1835.2;2009.01.16;-
Symantec;10;2009.01.26;-
TheHacker;6.3.1.5.229;2009.01.25;-
TrendMicro;8.700.0.1004;2009.01.24;Cryp_Xin
VBA32;3.12.8.11;2009.01.25;-
ViRobot;2009.1.23.1576;2009.01.23;-
VirusBuster;4.5.11.0;2009.01.25;Packed/Pohernah

Additional information
File size: 25426 bytes
MD5...: 13ec2bc9c147e15e8b44a01ba5d9ca44
SHA1..: 86eb5359b19ff681f1c4b6f1e1ccde29d2b854dd
SHA256: c4ac93c9c32e74ff53adccaf420489fbd9077873e7d3362f089d1c5bc4530f9d
SHA512: 11940f7bdcf9b81536d9688ba0ffad363dece4080d50555ed47fc4bca06fbda0<br>2795abdfa305d885879993e038464ff6844c011657c9980dfd5d60ce63f1209a<br>
ssdeep: 192:jWpvD7W9PXXqXhPb9jLr3qKGQCnMBEO5TVDk79bHKuxRtNAgnRp8iyycX:jW<br>p77ufXqx5H6AEIV479bKuZiZAcX<br>
PEiD..: -
TrID..: File type identification<br>Generic Win/DOS Executable (49.9%)<br>DOS Executable Generic (49.8%)<br>Autodesk FLIC Image File (extensions: flc, fli, cel) (0.1%)
PEInfo: PE Structure information<br><br>( base data )<br>entrypointaddress.: 0x4011c0<br>timedatestamp.....: 0x31b5ece (Fri Aug 27 07:16:30 1971)<br>machinetype.......: 0x14c (I386)<br><br>( 4 sections )<br>name        viradd    virsiz   rawdsiz  ntrpy  md5<br>.text       0x1000    0x2394    0x3000   7.99  8c10a1d6149d8fb3df31fe0345fb9c4d<br>.data       0x4000     0x9f0    0x1000   8.00  af7f40e3ba4106970540438ceb27c829<br>.rsrc       0x5000     0x8c8    0x1000   1.89  0822d4d85a7731759869c84f500752bc<br>.nah        0x6000     0x352     0x352   5.52  3b7f510ffa6f6e6a1394d2da3cc0b280<br><br>( 1 imports )  <br>&gt; KERNEL32.dll: GetProcAddress, LoadLibraryA, VirtualProtect<br><br>( 0 exports ) <br>
packers (Kaspersky): PE-Patch.PNH, PE-Crypt.PNH


It's just false positives from the packer.
Back to top
View user's profile Send private message
DoomsDay
Grandmaster Cheater
Reputation: 0

Joined: 06 Jan 2007
Posts: 768
Location: %HomePath%

PostPosted: Mon Jan 26, 2009 2:38 pm    Post subject: Reply with quote

Done.
(attached)
Back to top
View user's profile Send private message
Jesper
Grandmaster Cheater Supreme
Reputation: 9

Joined: 21 Feb 2007
Posts: 1156

PostPosted: Mon Jan 26, 2009 2:39 pm    Post subject: Reply with quote

Nice work.
Back to top
View user's profile Send private message
S3NSA
:3
Reputation: 1

Joined: 06 Dec 2006
Posts: 1908
Location: England.

PostPosted: Tue Jan 27, 2009 11:40 am    Post subject: Reply with quote

BP on __vbaStrCmp:


To see the password:


Or patch here (JE->JNZ):


For any password:


Thanks to DoomsDay for the dump.

_________________
~ You can find me on irc.ccplz.net x
Back to top
View user's profile Send private message Visit poster's website
Display posts from previous:   
Post new topic   Reply to topic    Cheat Engine Forum Index -> General programming -> Crackmes All times are GMT - 6 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum


Powered by phpBB © 2001, 2005 phpBB Group

CE Wiki   IRC (#CEF)   Twitter
Third party websites