[酷我] 文件头改了 #4

New Issue

jixunmoe · 2022-11-13T11:13:51Z

jixunmoe commented

2022-11-13 11:13:51 +00:00

文件头从之前的

0000h  79 65 65 6C 69 6F 6E 2D 6B 75 77 6F 2D 74 6D 65  yeelion-kuwo-tme

变成了

0000h  79 65 65 6C 69 6F 6E 2D 6B 75 77 6F 00 00 00 00  yeelion-kuwo....

测试时发现，补上文件头可以正常解密，猜测只是文件头的魔数改了。

样本：https://t.me/unlock_music_chat/95733 文件头从之前的 ``` 0000h 79 65 65 6C 69 6F 6E 2D 6B 75 77 6F 2D 74 6D 65 yeelion-kuwo-tme ``` 变成了 ``` 0000h 79 65 65 6C 69 6F 6E 2D 6B 75 77 6F 00 00 00 00 yeelion-kuwo.... ``` 测试时发现，补上文件头可以正常解密，猜测只是文件头的魔数改了。

👍 1

um-dev referenced this issue from um/cli

2022-11-20 00:01:20 +00:00

fix(kwm): allow new magic header #41

jixunmoe closed this issue

2022-11-20 00:51:47 +00:00

jixunmoe added the

crypto

platform-win

labels 2023-05-07 02:32:44 +00:00

Sign in to join this conversation.