I3Exec Generic Unpacker
how does it work? This tool will load into memory PointBlank.I3Exec
1. Copy I3Exec Generic Unpacker.exe PB folder
2. if you already have notice that PointBlank.I3Exec / PBlackout.I3Exec already loaded into memory means success
3. Dump using LordPE, PETools, OllyDbg PE Dumper, etc.
4. open the dump file
5. all code has been decrypted
now you can find the offsets value
By: RichardYusman (suhu)
VIRUS SCAN:
1. Copy I3Exec Generic Unpacker.exe PB folder
2. if you already have notice that PointBlank.I3Exec / PBlackout.I3Exec already loaded into memory means success
3. Dump using LordPE, PETools, OllyDbg PE Dumper, etc.
4. open the dump file
5. all code has been decrypted
now you can find the offsets value
By: RichardYusman (suhu)
VIRUS SCAN:
Code:
Antivirus Version Last Update Result AhnLab-V3 2010.10.18.01 2010.10.18 - AntiVir 7.10.12.244 2010.10.18 - Antiy-AVL 2.0.3.7 2010.10.18 - Authentium 5.2.0.5 2010.10.17 - Avast 4.8.1351.0 2010.10.18 - Avast5 5.0.594.0 2010.10.18 - AVG 9.0.0.851 2010.10.18 Win32/Heur BitDefender 7.2 2010.10.18 - CAT-QuickHeal 11.00 2010.10.18 (Suspicious) - DNAScan ClamAV 0.96.2.0-git 2010.10.18 - Comodo 6429 2010.10.18 - DrWeb 5.0.2.03300 2010.10.18 - Emsisoft 5.0.0.50 2010.10.18 - eSafe 7.0.17.0 2010.10.17 - eTrust-Vet 36.1.7917 2010.10.18 - F-Prot 4.6.2.117 2010.10.17 - F-Secure 9.0.16160.0 2010.10.18 - Fortinet 4.2.249.0 2010.10.18 - GData 21 2010.10.18 - Ikarus T3.1.1.90.0 2010.10.18 - Jiangmin 13.0.900 2010.10.18 - K7AntiVirus 9.66.2760 2010.10.15 - Kaspersky 7.0.0.125 2010.10.18 - McAfee 5.400.0.1158 2010.10.18 - McAfee-GW-Edition 2010.1C 2010.10.18 Heuristic.LooksLike.Win32.SuspiciousPE.C Microsoft 1.6201 2010.10.18 - NOD32 5542 2010.10.18 - Norman 6.06.07 2010.10.18 - nProtect 2010-10-18.01 2010.10.18 - Panda 10.0.2.7 2010.10.17 - PCTools 7.0.3.5 2010.10.18 - Prevx 3.0 2010.10.18 - Rising 22.69.04.03 2010.10.15 Packer.Win32.UnkPacker.d Sophos 4.58.0 2010.10.18 Mal/Behav-066 Sunbelt 7086 2010.10.18 - SUPERAntiSpyware 4.40.0.1006 2010.10.18 - Symantec 20101.2.0.161 2010.10.18 - TheHacker 6.7.0.1.060 2010.10.18 - TrendMicro 9.120.0.1004 2010.10.18 - TrendMicro-HouseCall 9.120.0.1004 2010.10.18 - VBA32 3.12.14.1 2010.10.18 - ViRobot 2010.10.18.4098 2010.10.18 - VirusBuster 12.69.3.4 2010.10.17 - Additional informationShow all MD5 : f8703016cabd2791a9804c7aa42c0d27 SHA1 : 99674a1c9a3f1d88d8beecb2ffe3755759506007 SHA256: 4909f3d5fafeb2023f6e054734d814e280084f267ef1fa34cd70331f8772fee8 VT Community
Originally Posted by npcaudition
Working