You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I’m encountering issues with the obfuscator when processing certain loaders. Below are the details:
Issue 1: Error with error.exe Loader
When attempting to obfuscate error.exe, the obfuscator throws an error immediately. I’ve attached screenshots that show the specific error messages, including some details from x64dbg, which might help in identifying the problem.
When I try to obfuscate the memecoil.exe loader using the exact same arguments, the process completes without any errors. However, none of the obfuscation functions seem to have any effect; when I inspect the loader in IDA, there are no changes. Args Used: obfuscator.exe memecoil.exe -pdb memecoil.pdb -f main -t BogusControlFlow -v mode 1 -t DecompBreak -t Substitution -t ConstantCrypt
Hi there,
I’m encountering issues with the obfuscator when processing certain loaders. Below are the details:
Issue 1: Error with error.exe Loader
When attempting to obfuscate error.exe, the obfuscator throws an error immediately. I’ve attached screenshots that show the specific error messages, including some details from x64dbg, which might help in identifying the problem.
Args used:
obfuscator.exe error.exe -pdb error.pdb -f main -t BogusControlFlow -v mode 1 -t DecompBreak -t Substitution -t ConstantCrypt
Issue 2: Error with error.exe Loader (without BogusControlFlow)
If I remove BogusControlFlow and leave the other functions, a different error occurs. I’ve attached a screenshot for this as well.
Args Used:
obfuscator.exe error.exe -pdb error.pdb -f main -t DecompBreak -t Substitution -t ConstantCrypt
Screenshot:
Issue 3: No Effect on memecoil.exe Loader
When I try to obfuscate the memecoil.exe loader using the exact same arguments, the process completes without any errors. However, none of the obfuscation functions seem to have any effect; when I inspect the loader in IDA, there are no changes.
Args Used:
obfuscator.exe memecoil.exe -pdb memecoil.pdb -f main -t BogusControlFlow -v mode 1 -t DecompBreak -t Substitution -t ConstantCrypt
Additional Information
Here is a link to all files (the error folder is the first loader and the second folder is memecoil).
Link:https://mega.nz/file/Jr1zgb6b#QJF3VK1_mXWJuCnTQJVLRNB3QNa-ByhclN2_txz6qsg
The text was updated successfully, but these errors were encountered: