[FlareOn5]FLEGGO

给了48个exe，打开一个分析

 

发现输入要与unk_404380相等，这个值在运行中得到，查看一下

 

 

 

发现是用的资源，用die查看

 

每个程序都差不多，把这些提出来

import os

files = os.listdir(r"C:\Users\My\Desktop\FLEGGO")
for filename in files:
     filename = r"C:\Users\My\Desktop\FLEGGO\\" + filename
     with open(filename,"rb") as f:
          f=f.read()[0x2ab0:0x2ad0]
     f=f.split(b'\x00')
     print("\"",end="")
     for i in f:
          if i == b'':
               break
          print(chr(int().from_bytes(i,byteorder='big', signed=True)),end="")
     print("\"")

key=["ZImIT7DyCMOeF6",
"PylRCpDK",
"UvCG4jaaIc4315",
"uVmH96JGdPkEBfd",
"3nEiXqMnXG",
"Q9WdIAGjUKdNxr6",
"UkuAJxmt8",
"b1VRfMTNPu",
"qNb6tr7n",
"KSL8EAnlIZin1gG",
"uLKEIRAEn",
"7kcuVMWeIBFGWfJ",
"NcMkqwelbRu",
"yu7hNshnpM4Vy",
"5xj9HmHyhF",
"ZYNGeumv6QuI7",
"dRnTVwZPjf0U",
"dPVLAQ8LwmhH",
"J1kj42jZsC9",
"rXZE7pDx3",
"eoneTNuryZ3eF",
"jZAorSlICuQa0g8",
"hqpNm7VJL",
"45psrewIRS",
"2LUmPSYdxDcil",
"aGUwVeVZ2c19mgE",
"goTZP4go",
"9aIZjTerf0",
"jZRmFmeIchneGS",
"Z8VCO7XbKUk",
"14bm9pHvbufOA",
"9eDMpbMSEeZ",
"auDB6HtMv",
"C446Zdun",
"nLSGJ2BdwC",
"0d7qdvEhYGc",
"5O2godXTZePdWZd",
"ohj5W6Goli",
"4z0gAyKdk",
"r6ZWNWeFadW",
"dEDDxJaxc1R",
"HQG0By9q",
"0rhvT5GX",
"Fs3Ogu6W3qk59kZ",
"8V9AzigUcb2J",
"gNbeYAjn",
"8Etmc0DAF8Qv",
"XgkvZJKe"]

import os
import subprocess
files = os.listdir("C:\Users\My\Desktop\FLEGGO")
i=0
for filename in files:
    filename = "C:\Users\My\Desktop\FLEGGO\\" + filename
    p = subprocess.Popen([filename], stdin=subprocess.PIPE, stdout=subprocess.PIPE, stderr=subprocess.PIPE)
    p.stdin.write(key[i])
    p.stdin.close()
    i+=1
    out=p.stdout.read()
    p.stdout.close()
    print out

得到48张图片，每张图有一个编号，且对应一个字母

 

 

What is the password?

Everything is awesome!

65141174.png => w


What is the password?

Everything is awesome!

85934406.png => m


What is the password?

Everything is awesome!

67782682.png => m


What is the password?

Everything is awesome!

75072258.png => r


What is the password?

Everything is awesome!

16544936.png => e


What is the password?

Everything is awesome!

67322218.png => _


What is the password?

Everything is awesome!

58770751.png => o


What is the password?

Everything is awesome!

64915798.png => 3


What is the password?

Everything is awesome!

88763595.png => e


What is the password?

Everything is awesome!

18376743.png => _


What is the password?

Everything is awesome!

36870498.png => m


What is the password?

Everything is awesome!

72501159.png => c


What is the password?

Everything is awesome!

47619326.png => p


What is the password?

Everything is awesome!

70037217.png => m


What is the password?

Everything is awesome!

18309310.png => @


What is the password?

Everything is awesome!

15566524.png => e


What is the password?

Everything is awesome!

82100368.png => m


What is the password?

Everything is awesome!

60075496.png => s


What is the password?

Everything is awesome!

71290032.png => a


What is the password?

Everything is awesome!

33718379.png => .


What is the password?

Everything is awesome!

42255131.png => t


What is the password?

Everything is awesome!

16295588.png => a


What is the password?

Everything is awesome!

61333226.png => f


What is the password?

Everything is awesome!

13147895.png => w


What is the password?

Everything is awesome!

16785906.png => 4


What is the password?

Everything is awesome!

80333569.png => o


What is the password?

Everything is awesome!

37723511.png => n


What is the password?

Everything is awesome!

44958449.png => _


What is the password?

Everything is awesome!

30171375.png => s


What is the password?

Everything is awesome!

72263993.png => h


What is the password?

Everything is awesome!

82236857.png => e


What is the password?

Everything is awesome!

33098947.png => _


What is the password?

Everything is awesome!

33662866.png => r


What is the password?

Everything is awesome!

47893007.png => _


What is the password?

Everything is awesome!

61006829.png => l


What is the password?

Everything is awesome!

89295012.png => 0


What is the password?

Everything is awesome!

87730986.png => 0


What is the password?

Everything is awesome!

65626704.png => 3


What is the password?

Everything is awesome!

72562746.png => -


What is the password?

Everything is awesome!

36494753.png => 0


What is the password?

Everything is awesome!

79545849.png => s


What is the password?

Everything is awesome!

63223880.png => a


What is the password?

Everything is awesome!

51227743.png => a


What is the password?

Everything is awesome!

73903128.png => u


What is the password?

Everything is awesome!

52817899.png => n


What is the password?

Everything is awesome!

19343964.png => o


What is the password?

Everything is awesome!

12268605.png => s


What is the password?

Everything is awesome!

47202222.png => n