Sample

Metadata

SHA256
0d7e7c6c1e02f7e5e5d0bf8f191e9d50636e71cabc2b4883d112b0f04da3d9f0
Difficulty
advanced
Tags
string deobfuscation .net
Author
strup

Analysis

Goal

Write a script or program that deobfuscates the strings and patches the assembly with the deobfuscated strings

Description

Fake Java Updater, .NET assembly, the sample features obfuscated strings and anti-reflection, this is advanced because the currently available tooling does not work and the task is to write your own

Recommended Tools

AssemblyResolver DnSpyEx Harmony

Solutions

No solutions available yet.

Image

Sample image

Video