用 PEiD 和 fi  还有 language2000 都查不出,如下图




用 PE-Scan v3.31 的高级扫描得出



最接近的匹配
加壳器 :: 匹配度
-
telock 0.95 :: 100.00%
neolite 1.0x [dll/ocx] :: 96.55%
pe-pack 1.0 :: 89.29%
telock 0.92a :: 87.50%
neolite 1.0 :: 86.67%
neolite 1.01 :: 86.67%
neolite 2.00 :: 86.67%
telock 0.96 :: 85.71%
aspack 1.08.04 :: 84.38%
telock 0.98 :: 83.33%
ep 0.2 :: 76.00%
aspack 2.000 :: 75.00%
aspack 2.001 :: 75.00%
bit-arts crunch 4.0.0.0 :: 68.75%
neolite 2.00 [dll/ocx] :: 54.55%
petite 2.1-2.2 :: 54.17%
petite 2.1-2.2 :: 54.17%
petite 1.2 :: 46.88%
zcode 1.01 :: 42.86%
ezip 1.0 :: 41.94%
pe-shield 0.2bx :: 41.67%
yoda's pe-encryptor 1.0 :: 40.63%
armadillo 2.60a :: 39.29%
noodlecrypt 2 :: 37.50%
packmaster 1.0/1.6 :: 37.50%
telock 0.70 :: 37.50%
telock 0.71 :: 37.50%
telock 0.80 :: 37.50%
armadillo 2.50 :: 37.04%
armadillo 2.50b1a :: 37.04%
armadillo 2.50b3 :: 37.04%
armadillo 2.51 :: 37.04%
armadillo 2.52b2 :: 37.04%
armadillo 2.52b3a :: 37.04%
pklite 1.1 build 11 :: 36.36%
armadillo 2.52 :: 35.71%
armadillo 2.60 :: 35.71%
armadillo 2.60b2 :: 35.71%
armadillo 2.60c :: 35.71%
armadillo 2.00 :: 35.48%
armadillo 2.00 alpha a :: 35.48%
armadillo 2.00b1 :: 35.48%
armadillo 2.00b2-b3 :: 35.48%
telock 0.60 :: 35.48%
upx 0.71-0.72 :: 35.29%
upx 0.62-0.70 :: 34.78%
upx 0.62-0.70 :: 34.78%
armadillo 2.53x :: 34.62%
crypto-lock 2.00 :: 34.38%
aspack 2.11 :: 33.33%

用ob打开


究竟这是什么壳来的?

[培训]《安卓高级研修班(网课)》月薪三万计划，掌握调试、分析还原ollvm、vmp的方法，定制art虚拟机自动化脱壳的方法