2

I've been playing around with RE for a bit now and a friend sent over a crackme. I figured mise well try and crack it.

The first thing I did was to put the executable into Exeinfo PE and there was nothing special there. So next I loaded the DLL into there and it came up with PEcompact ver.1.41 - v1.84 and it said to unpack it.

So I found an unpacker called GUnPacker loaded it in there and it gave me Address : <0x0041E738> ---- Is OEP(FOEP) Possibly... Not sure what to do with this since I am fairly new to the whole DLL being packed.

When you load the exe it gives me a ID #:00FF-7514-B10D and then it asks for a serial. I loaded the DLL into dllexp and there is a function named GetSerial.

Also I believe it is a VB6 exe.

Is there any way to intercept that or something so that when I debug the program I can break when it is called and retrieve the serial?

  • If you are in the study phase, I would suggest to leave all unpackers aside and go dirty, otherwise you will end up as another code monkey. Why do you believe its VB6? – PhoeniX Jan 6 '15 at 7:29
  • Ok sounds like a plan. And Exeinfo PE says that its MS Visual Basic 5.0-6.0 so I opened it with VB Decompiler and it opens fine. Other than that I'll take your word and go through those links. – NotSoPro Jan 6 '15 at 14:25
2

Your question is too broad and it looks that you lack basics in the RCE in general. I would suggest to start with some theory :

in addition try some easy ones from:

and in parallel go over first tuts here:

I think this will give you an answer for the question. Other then this, try to ask the above in amore specific way as we do not have the binary to really pin-point you what to do.

Have fun.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.