search

Hendi48 / Magicmida

Themida unpacker
330 stars 79 forks source link

After unpacking, if I reboot or move it to another computer and run it, there is no response at all! #27

Open hiphop9 opened 1 month ago

hiphop9 commented 1 month ago

I can unpack and run Magicmida, but it stops working after rebooting. I've checked the IAT values, INT section header, ASLR, etc., but I can't figure out what the problem is. What could be the issue? 화면 캡처 2024-07-11 152403 화면 캡처 2024-07-11 152420 화면 캡처 2024-07-11 154512

Hendi48 commented 1 month ago

This issue typically occurs when there is virtualized code that includes anti-dump checks. Basically there are "hardcoded" DLL base addresses in your Themida section that will only match the system that unpacked the binary (and only until a reboot, as you noticed).