Выяснить чем криптован файл внесение изменений

Discussion in 'Реверсинг' started by Ch1ch3, 26 Jan 2015.

  1. Ch1ch3

    Ch1ch3 New Member

    Joined:
    21 Feb 2010
    Messages:
    0
    Likes Received:
    0
    Reputations:
    0
    Здравствуйте необходимо выяснить чем закриптован данный файл и как в него внести изменения?

    Благодарю.

    Ссылка на файл http://rghost.net/6LTB8YZNw
     
  2. Kaimi

    Kaimi Well-Known Member

    Joined:
    23 Aug 2007
    Messages:
    1,732
    Likes Received:
    811
    Reputations:
    231
    binwalk в помощь. Или анализируй, как с этим файлом работает программа, от которой он был взят.
    Code:
    
    DECIMAL       HEXADECIMAL     DESCRIPTION
    --------------------------------------------------------------------------------
    551125        0x868D5         LZMA compressed data, properties: 0xC8, dictionary size: 33554432 bytes, uncompressed size: 16777216 bytes
    733033        0xB2F69         LZMA compressed data, properties: 0xC8, dictionary size: 33554432 bytes, uncompressed size: 16777216 bytes
    1250741       0x1315B5        LZMA compressed data, properties: 0x64, dictionary size: 33554432 bytes, uncompressed size: 16777216 bytes
    1829795       0x1BEBA3        LZMA compressed data, properties: 0x5D, dictionary size: 16777216 bytes, missing uncompressed size
    1830904       0x1BEFF8        LZMA compressed data, properties: 0x5D, dictionary size: 16777216 bytes, missing uncompressed size
    1832000       0x1BF440        LZMA compressed data, properties: 0x5D, dictionary size: 16777216 bytes, missing uncompressed size
    1833110       0x1BF896        LZMA compressed data, properties: 0x5D, dictionary size: 16777216 bytes, missing uncompressed size
    1834223       0x1BFCEF        LZMA compressed data, properties: 0x5D, dictionary size: 16777216 bytes, missing uncompressed size
    1835374       0x1C016E        LZMA compressed data, properties: 0x5D, dictionary size: 16777216 bytes, missing uncompressed size
    1903283       0x1D0AB3        LZMA compressed data, properties: 0x5D, dictionary size: 16777216 bytes, missing uncompressed size
    1903339       0x1D0AEB        LZMA compressed data, properties: 0x5D, dictionary size: 16777216 bytes, missing uncompressed size
    1903396       0x1D0B24        LZMA compressed data, properties: 0x5D, dictionary size: 16777216 bytes, missing uncompressed size
    1903453       0x1D0B5D        LZMA compressed data, properties: 0x5D, dictionary size: 16777216 bytes, missing uncompressed size
    1903513       0x1D0B99        LZMA compressed data, properties: 0x5D, dictionary size: 16777216 bytes, missing uncompressed size
    1903569       0x1D0BD1        LZMA compressed data, properties: 0x5D, dictionary size: 16777216 bytes, missing uncompressed size
    3401436       0x33E6DC        mcrypt 2.2 encrypted data, algorithm: blowfish-448, mode: CBC, keymode: 4bit
    6643886       0x6560AE        LZMA compressed data, properties: 0x5B, dictionary size: 65536 bytes, uncompressed size: 16777216 bytes
    7791297       0x76E2C1        mcrypt 2.2 encrypted data, algorithm: blowfish-448, mode: CBC, keymode: 8bit
    8127829       0x7C0555        mcrypt 2.2 encrypted data, algorithm: blowfish-448, mode: CBC, keymode: 4bit
    8127871       0x7C057F        mcrypt 2.2 encrypted data, algorithm: blowfish-448, mode: CBC, keymode: SHA-1 hash
    8127900       0x7C059C        mcrypt 2.2 encrypted data, algorithm: blowfish-448, mode: CBC, keymode: MD5 hash
    
     
    _________________________
    1 person likes this.