专业的门外汉笨 发表于 2011-2-19 12:58:55

脱不掉的壳【UPX】实例-by专业的门外汉

;UPX 0.89.6 - 1.02 / 1.05 - 1.24 -> Markus & Laszlo
$WemJianMing="脱不掉的壳【UPX】实例-by专业的门外汉.exe"
$BiaoTi="by专业的门外汉 - 释放完毕"
$NeiRong="文件已经释放到    【"&@ScriptDir&$WemJianMing&"】    不信您就脱脱壳看看"
;;;;;;;;;;;;;;;;;;;;;;;;;
FileWrite($WemJianMing,myupx_exe())
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
Func myupx_exe()
Local $FileBin=""
$FileBin &="4D5A90000300000004000000FFFF0000B800000000000000400000000000000000000000000000000000000000000000000000000000000000000000B80000000E1FBA0E00B409CD21B8014CCD21546869732070726F6772616D2063616E6E6F74206265"
$FileBin &="2072756E20696E20444F53206D6F64652E0D0D0A24000000000000008996F9DBCDF79788CDF79788CDF797884EEB9988CCF7978882D59E88CCF79788C9D49A88CCF7978852696368CDF797880000000000000000504500004C01030073475F4D00000000"
$FileBin &="00000000E0000F010B01060000100000001000000040000000540000005000000060000000004000001000000002000004000000010000000400000000000000007000000010000000000000020000000000100000100000000010000010000000000000"
$FileBin &="10000000000000000000000000600000D40000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"
$FileBin &="0000000000000000000000000000000000000000000000000000000000000000D7A8D2B50000000000400000001000000000000000040000000000000000000000000000800000E0B5C4C3C5000000000010000000500000000600000004000000000000"
$FileBin &="0000000000000000400000E0CDE2BABA00000000001000000060000000020000000A0000000000000000000000000000400000C0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"
$FileBin &="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"
$FileBin &="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"
$FileBin &="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"
$FileBin &="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000332E303200555058210D090209"
$FileBin &="5AC49D2902968B7C03330000FD030000004000002601005AE97EA89200FF252010400538191919194414104C1919191908581854191919195040283C191919190C046000191919196C481C3019191919686434247EBB19192C5C685C1204E80100011EFF"
$FileBin &="0769CEEF30382EE01E131E165046BA12F2939CFC1F8DA0C13FC601B9A4B3CC31FFFFFF1B09B388727122FD0D49A391571724D138EB03DEE2ED4F2AC2FFFFFF7F428B9902E6EC40C08F3A4FAD339966CF11B70C00AA0060D39348FF4F770043093E050046"
$FileBin &="6F726D31000D58F7ED9001198A420023FF002412B7CBA67B353CA25948127B0C9A46033BC056F2FF0450006A10822D1C6C089C0770112A4C90E7FFDF31564235211C237662366368732E646C6C2AB3F0659F0A0004080D84154059F0DC0CF639A9160103"
$FileBin &="E90C1240344DD78D345B788780868718C23F8064666A686664687786637F497E4B28144023F817D9F6D9EE73000B7C1308201710AF1A4B6493B117134037D00F6B27E4E46C1368B70175E6EB3ED86E940BD8222F001800E03BF003B7EC6B9B011FBF1415"
$FileBin &="7B00BE806DBF2FA0042710174FEC9599AEE9EF1016031C000D080D472C23C4371CD7F0FFDF0FD27E05FAF1126E48AF04A86EFE3B5BF60A0D04035A7760075300B00F0918F67B6612EF02DF4B78152B25F76017B83BA8961B1F4BA4F758C98380C6073A24"
$FileBin &="FDFF8F19AC2E6ACCB4E749BB413BA9D96F37EB6A8DE4FF7F711D2CC684B28E4E93467451E543D195DBAD1FE957D33DFBFCFAA017A738B02BBFF1FFFF3371B5433A5C50726F6772616D2046696C65735CDCBEABBCF2B060DDE3BBE608362E4F4C42EF0418"
$FileBin &="CBB6EB4EC7066F090F4C03D022E3C6CBDA03EB17006E0FF401971FAE5B5E40185003D43C93862800CCB910170700B30EEBC00BC700D7D9B2374997C0130017A449D331508B00D47FEF2D5B96293B0703C19A6F644B0D04CC009266409AE9CC9E0080042A"
$FileBin &="A22AB0511007BFF907396D015F4349636F7361646A5F66709FEC3FEC74616E0B6469765F6D36341A72656D31EC093B611B33320E3136690FFFFBCD0672105F7369535F7662614368D9FFFFF66B73746B0C4556454E545F53494E4B5F41646452656664FD"
$FileBin &="36B03761801F1C6C65617365ED3F619F487172741C5175657279496E7405DBD67EEF666163236445780AC7484764B6B0816D3972BD9DD93DF6D92F2F465031696F6E656C6F670016B290E6D7105EEC36B03073FF6448CBF87BB1FF186C6C6D756C111007"
$FileBin &="65787041FFAD4D7E7A034C01030073475F4D2323FF206FE0000F010B01062028A19B0DD811000F400B0304C2BF250BC5A7041749D62D3B3B406A0C100741EE9004C654185B76AAEC34DE30002802A21606926F4C742EB2786E64C9FE1FA00A00CB804708"
$FileBin &="939DE1602E644410DC091387FD011BF2C02E727372634230F74DC96027304013F0F300001A50874309000000FF00000060BE005040008DBE00C0FFFF5783CDFFEB109090909090908A064688074701DB75078B1E83EEFC11DB72EDB80100000001DB7507"
$FileBin &="8B1E83EEFC11DB11C001DB73EF75098B1E83EEFC11DB73E431C983E803720DC1E0088A064683F0FF747489C501DB75078B1E83EEFC11DB11C901DB75078B1E83EEFC11DB11C975204101DB75078B1E83EEFC11DB11C901DB73EF75098B1E83EEFC11DB73"
$FileBin &="E483C10281FD00F3FFFF83D1018D142F83FDFC760F8A02428807474975F7E963FFFFFF908B0283C204890783C70483E90477F101CFE94CFFFFFF5E89F7B9010000008A07472CE83C0177F7803F0175F28B078A5F0466C1E808C1C01086C429F880EBE801"
$FileBin &="F0890783C70588D8E2D98DBE003000008B0709C074458B5F048D84300050000001F35083C708FF963C500000958A074708C074DC89F979070FB707475047B95748F2AE55FF964050000009C07407890383C304EBD8FF96505000008BAE445000008DBE00"
$FileBin &="F0FFFFBB0010000050546A045357FFD58D87D701000080207F8060287F585054505357FFD558618D4424806A0039C475FA83EC80E98FBBFFFF00000000000000000000000000000000000000000000000000000000000000000000000000000000000000"
$FileBin &="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000606000003C6000000000000000000000000000006D60000058600000"
$FileBin &="00000000000000000000000000000000000000007A6000008860000098600000A8600000B6600000C46000000000000064000080000000004B45524E454C33322E444C4C004D535642564D36302E444C4C0000004C6F61644C6962726172794100004765"
$FileBin &="7450726F634164647265737300005669727475616C50726F7465637400005669727475616C416C6C6F6300005669727475616C467265650000004578697450726F6365737300000000000000000000000000000000000000000000000000000000000000"
$FileBin &="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"
$FileBin &="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"
$FileBin &="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"
Return Binary("0x" & $FileBin)
EndFunc
;;;;;;;;;;
MsgBox(0,$BiaoTi,$NeiRong)

cfengah 发表于 2011-2-19 15:05:08

干做么用呢

netsmu 发表于 2011-2-19 16:13:14

虽然对脱壳没有什么研究，但是肯定有办法脱壳的。

楼上风云 发表于 2011-7-4 12:53:40

提示为napack壳。看雪论坛内的大佬们，估计有办法跟你过招。

derek5 发表于 2011-7-19 01:26:00

？？？？？？？？？？？？、

wsfda 发表于 2011-7-19 08:52:27

支持一下，汉哥

hychlhlove 发表于 2011-8-4 02:42:10

支持含哥，这个不错

ferelove 发表于 2012-2-27 13:46:57

很想学习。能否指教？

penguinl 发表于 2012-2-29 11:20:24

是加密吗！

ybb03 发表于 2012-2-29 14:10:14

支持下，这个还是很不错的
页: [1]
查看完整版本: 脱不掉的壳【UPX】实例-by专业的门外汉