This exe packed/compressed with UPX. (Some viruscanners would be report false positives..)
Edit: This is would be VB6 (Exe contains signs of MSVBVM60.dll)?
Printable View
This exe packed/compressed with UPX. (Some viruscanners would be report false positives..)
Edit: This is would be VB6 (Exe contains signs of MSVBVM60.dll)?
Only false positives because it's been packed with UPX.
http://i.imgur.com/W0DHauD.png
And upon trying to unpack it with UPX...
http://i.imgur.com/ANmU4iv.png
If it's with Visual Basic 6.0 the decompilers don't interpret the MSIL so it's all IL code. (only form designs are recovered).
If it's with C++/C which I highly doubt then it can't be decompiled and only edited in memory with Ollydbg. :D
http://i.imgur.com/28CbQMo.png
Scan of unpacked file : https://www.virustotal.com/en/file/e...is/1370249209/
:lol:
This is what I had in my RUN.bat
How come it worked for you? :)Code:@echo off
upx.exe -d NewHabboMapEditor.exe
PAUSE
EDIT appears I've already unpacked it. :laugh:
EDIT 2
Yup. dj was right.
http://i.imgur.com/x2Ziwxp.png
@Quacky is there a way to get the source :P?
Is impossible to get source of vb6 program.
Seems nice... but next time you should release it in English because i dont know anything about French...
Yes, but google translator didnt help me alot.
He clearly said he FOUND it on a different forum, how can he release it in English if he didn't make it..?
If you read what he posted you'd understand that.
Nice tool, but I am still lost as to wether it is actually safe or not - since I saw the unpacked version has the same sort of scan coming out, anyone want to give a definitive answer as to how safe it is?
All the best,
Richard Komakech.
Edit: i returned to the thread and i found that :
A new version ! The author just add the support for english language :
And some others stuffs ...
Screenshot : http://i.imm.io/18aR5.png
My screenshot :
http://i.imm.io/18f63.jpeg
You can run it under a VM or like some members, in sandbox, you clearly
see the tool is working and it don't connect to the internet, no registry access, etc ..