Post Reply 
 
Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Decrypting issue
08-06-2012, 06:52 PM (This post was last modified: 08-06-2012 06:55 PM by SINA.)
Post: #1
Decrypting issue
Hello,
I'm goin to write a decoder for a unknown encryption but i have .SO(loaders) that used for that... as far as i know docoders uses the a lib(eg.: ioncube_loader_win_5.2.dll) and as i said i have libs ".SO"

anyone could help me???
Find all posts by this user
Quote this message in a reply
08-06-2012, 06:56 PM (This post was last modified: 08-06-2012 06:57 PM by iDENTiTY.)
Post: #2
RE: Decrypting issue
analyze the loaders and write decoder in c++

and what's the encoder name ?

yeah.
Find all posts by this user
Quote this message in a reply
08-06-2012, 07:04 PM
Post: #3
RE: Decrypting issue
I'm newbie on that friend i just opened that SOs in IDA Pro assembly codes appeared then what is my first job ???
The language is PERL, this is the module that loads the Shared objects...
Code:
package WSD::Filter;

use 5.006000;
#use strict;
#use warnings;

our $VERSION = '1.0';

require DynaLoader;
@ISA = qw(DynaLoader);
my $perlver = '508';
$perlver = '510' if($] >= 5.01);
#print $];
my @v = ('32_2', '32', '32_3', '32_4', '32_5', '64', '64_3', '64_4', '64_2');
my $libref = undef;
my $file_version;
while(@v && !$libref) {
    my $bit = shift @v;
    $file_version = $perlver.$bit;
    $libref = DynaLoader::dl_load_file("Modules/WSD/Filter$file_version.so");
}
#print "$libref\n";
my $symref = DynaLoader::dl_find_symbol($libref, 'boot_WSD__Filter');
#print "$symref\n";
my $xs = DynaLoader::dl_install_xsub('WSD::Filter::bootstrap', $symref);
#print "$xs\n";
&$xs('WSD::Filter');
1;
Find all posts by this user
Quote this message in a reply
08-06-2012, 07:06 PM
Post: #4
RE: Decrypting issue
this is a perl encoding i found it too in xfilesharing pro Smile

yeah.
Find all posts by this user
Quote this message in a reply
08-06-2012, 07:07 PM
Post: #5
RE: Decrypting issue
Well... you can ever solve this ?? any idea my friend ???
Find all posts by this user
Quote this message in a reply
08-06-2012, 07:08 PM
Post: #6
RE: Decrypting issue
not yet but i'll give it a try soon Smile

yeah.
Find all posts by this user
Quote this message in a reply
08-06-2012, 07:13 PM
Post: #7
RE: Decrypting issue
so i think this is so simple than ioncube loaders....please make me aware of your research. im interested to write a decoder Big Grin
Find all posts by this user
Quote this message in a reply
Post Reply 


Forum Jump:


User(s) browsing this thread: 1 Guest(s)

Contact Us | Homepage | Return to Top | Return to Content | Lite (Archive) Mode | RSS Syndication