4 thoughts on “Updated Enigma Virtual Box unpacker (again)

  1. Hi master Kao!
    I've used this version of EVB tool:
    EnigmaVBUnpacker v0.61, compiled on 05-03-2023 22:59 Supports Enigma Virtual Box v4.10..10.30
    but the exe it recovered has got wrong EP as well as missed Import table, see below

    some pieces from log:
    [+] x64 executable
    [+] Embedded files are compressed
    [+] EnigmaVB version: 10.30
    [!] Warning: cannot fix PE Exception directory. Unpacked file may or may not work. Be careful!

    [+] Finished!

    so the question is - what does it mean the last warning?

    also when I opened up unpacked .exe in exeinfope 0077 it says this:
    File is corrupted ---> Entry Point over the file! ***
    example screen from the tool -
    {hidden link}

    general question - are there any reasons that the tool might not unpack exe(s) from EVB successfully?

    • Hi Alen,
      I can't solve your specific issue without seeing the actual file. Please upload it to mega.nz or mediafire.com and send me a link.

      I've tried to make the unpacker work reasonably well on most files. However, there are some corner cases which are either not implemented or not well tested because I didn't have enough sample files to work with. Judging from the screenshot, your file is 64-bit .NET executable and it might be one of those cases.

Leave a Reply

  • Be nice to me and everyone else.
  • If you are reporting a problem in my tool, please upload the file which causes the problem.
    I can`t help you without seeing the file.
  • Links in comments are visible only to me. Other visitors cannot see them.

Your email address will not be published.

eight  −   =  2