Empty mangled name in mach-o header

KJCracks / Clutch

Fast iOS executable dumper

3.71k stars 646 forks source link

Empty mangled name in mach-o header #130

Open vtky opened 8 years ago

vtky commented 8 years ago

Hey Guys,

I've just dumped an app with Clutch 2.0.1 and am trying to run it. However when I run it, it crashes and syslog has the following error

Empty mangled name in mach-o header: /private/var/mobile/Containers/Bundle/Application/77254E84-57B9-43C2-9864-E9635C83CF4D/DP4MOBILE-iphone_App_Store.app/Digipass
Apr 12 03:31:36: --- last message repeated 2893 times ---

Any idea what is going on?

Tatsh commented 8 years ago

Do other apps work?

vtky commented 8 years ago

@Tatsh Nope. Haven't come across this with other apps. I'm thinking because this app has some protections around it that is causing this issue?

Tatsh commented 8 years ago

Most likely. They must have some sort of way to have the app generate invalid symbol names like empty string upon decryption when it's not done in a 'normal' way, as in Clutch.

Also, they could be checking if the header is non-encrypted in the original binary. Since you have the decrypted binary (but not in full), likely you would have to now do some extra patching to get it to work.

Tatsh commented 7 years ago

This app https://itunes.apple.com/us/app/digipass-for-mobile-enterprise-security-iphone/id541882261?mt=8

aaronash commented 7 years ago

@vtky Did you find a way around this?