I asked earlier about unpacking a packed .NET exe. But now I need to see the source code for an obfuscated DLL:

enter image description here

Any idea how to unpack it?

  • did you try github.com/de4dot/de4dot
    – SSpoke
    Jul 3 at 3:33
  • @SSpoke thanks. Tried it. But unfortunately it gave me Detected Unknown Obfuscator and what it created didn't help much.
    – c00000fd
    Jul 3 at 3:51
  • 1
    well thats the best tool on the market, your last bet is to use (Detect It Easy) github.com/horsicq/Detect-It-Easy to figure out which obfuscator it is (if you are lucky idk if it works for .NET programs that well) then use this link: github.com/NotPrab/.NET-Deobfuscator together with DIE to narrow it down. On DIE (Try the Nauz File detector) if the default one doesn't find it (for more luck). If DIE doesn't have Nauz try download the stand alone here : github.com/horsicq/Nauz-File-Detector
    – SSpoke
    Jul 3 at 3:55
  • @SSpoke yeah, it tells me its Eazfuscator
    – c00000fd
    Jul 4 at 5:15
  • cool I'm pretty sure you already got it done, but ya there is 2 options for that EazFixer / eazdevirt (to run both tools you need to use de4dot first)
    – SSpoke
    Jul 5 at 17:09

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.