0

I have given a .ps1 file which loads a .dll via:

Import-Module ".\decrypter.dll"

After that, a call to that module is performed by:

get-decrypt(" *Some Base64 Encoded string* ")

Only the .dll is given. The Dependency Walker returns no exported functions. IDA Pro Free shows only one module My question: How do I debug this .dll file?

Kindly regards

2

The file decrypter.dll is a .NET dll which (if it's not obfuscated) means you can decompile it to full readable source code with tools like Reflector, dotPeek or JustDecompile.

Here are a couple of links from my blog detailing how to use such tools:

Once you have the source code (easiest is to save the decompilation as Visual Studio Project) you can debug the dll code in Visual Studio when calling into the dll from PowerShell.

enter image description here

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.