I asked earlier about unpacking a packed .NET exe. But now I need to see the source code for an obfuscated DLL:

enter image description here

Any idea how to unpack it?

  • did you try github.com/de4dot/de4dot
    – SSpoke
    Commented Jul 3, 2021 at 3:33
  • @SSpoke thanks. Tried it. But unfortunately it gave me Detected Unknown Obfuscator and what it created didn't help much.
    – c00000fd
    Commented Jul 3, 2021 at 3:51
  • 1
    well thats the best tool on the market, your last bet is to use (Detect It Easy) github.com/horsicq/Detect-It-Easy to figure out which obfuscator it is (if you are lucky idk if it works for .NET programs that well) then use this link: github.com/NotPrab/.NET-Deobfuscator together with DIE to narrow it down. On DIE (Try the Nauz File detector) if the default one doesn't find it (for more luck). If DIE doesn't have Nauz try download the stand alone here : github.com/horsicq/Nauz-File-Detector
    – SSpoke
    Commented Jul 3, 2021 at 3:55
  • @SSpoke yeah, it tells me its Eazfuscator
    – c00000fd
    Commented Jul 4, 2021 at 5:15
  • cool I'm pretty sure you already got it done, but ya there is 2 options for that EazFixer / eazdevirt (to run both tools you need to use de4dot first)
    – SSpoke
    Commented Jul 5, 2021 at 17:09


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.