BitMono icon indicating copy to clipboard operation
BitMono copied to clipboard

Can not run ActiveX dll after BitMono crypted.

Open Zeki-Gursoy opened this issue 9 months ago • 10 comments

I wrote Net FW 4.8.1 dll and create TLB. Dll can not load in Excel VBA. I get "Automation error". Trying 32 and 64 bits.

Zeki-Gursoy avatar May 09 '24 19:05 Zeki-Gursoy

Hi, can you send the Protections.json file, and the logs you got from BitMono

sunnamed434 avatar May 10 '24 08:05 sunnamed434

Of course... I attached. . bitmono-2024-05-09-22-02-45.log

protections.json

Zeki-Gursoy avatar May 10 '24 09:05 Zeki-Gursoy

[2024-05-09 22:02:47 WRN][BitMono.Obfuscation.Notifiers.ProtectionsRuntimeMonikerNotifier] [!!!] UnmanagedString - Intended for .NET Core runtime
[2024-05-09 22:02:47 WRN][BitMono.Obfuscation.Notifiers.ProtectionsRuntimeMonikerNotifier] [!!!] UnmanagedString - Intended for .NET Framework runtime
[2024-05-09 22:02:47 WRN][BitMono.Obfuscation.Notifiers.ProtectionsRuntimeMonikerNotifier] [!!!] AntiDecompiler - Intended for Mono runtime
[2024-05-09 22:02:47 WRN][BitMono.Obfuscation.Notifiers.ProtectionsRuntimeMonikerNotifier] [!!!] BitDotNet - Intended for Mono runtime
[2024-05-09 22:02:47 WRN][BitMono.Obfuscation.Notifiers.ProtectionsRuntimeMonikerNotifier] [!!!] BitMono - Intended for Mono runtime

First of, when you see Intended for <...> runtime its means specific feature is only able to work on the provided runtime. By this I mean probably this is why your .dll can't be used normally, I'd recommend to disable next features: AntiDecompiler, BitDotNet, and BitMono.

But, to ensure it work fine, keep only AntiILdasm feature as single enabled feature in protections.json and try to repeat the same thing you did before and let me know if it work or not

sunnamed434 avatar May 10 '24 18:05 sunnamed434

I tried all protection options one by one. My dll code not work in VBA below options: Also, BitMono app converts AnyCpu dll to 32 bit dll.

  1. NoNamespaces
  2. FullRenamer
  3. DotNetHook
  4. BitMethodDotnet
  5. BitDotNet
  6. BitMono

Zeki-Gursoy avatar May 11 '24 13:05 Zeki-Gursoy

Ok. Try to do this

sunnamed434 avatar May 12 '24 08:05 sunnamed434

I tried...

  • BitMono App still Dll converting to 32 bit.
  • I set (top) "2.FullRenamer" true and retry with BitMono. "Automation Error" message still go on in VBA. If without this option works but, dll readable with ILSPY.

Have you idea?

Zeki-Gursoy avatar May 12 '24 20:05 Zeki-Gursoy

  1. Ok, I'll try to make a fix
  2. Can you enable only AntiIldasm feature, and let me know if it work

sunnamed434 avatar May 13 '24 07:05 sunnamed434

Ok, I tried only "AntiIlDasm" VBA code works. But, DLL code full readable with ILSPY.

Zeki-Gursoy avatar May 13 '24 17:05 Zeki-Gursoy

Nice that it work. I guess FullRenamer was breaking smth in your code

sunnamed434 avatar May 13 '24 19:05 sunnamed434

Try to use CallToCalli, it should work fine and hide some code

sunnamed434 avatar May 13 '24 19:05 sunnamed434

Closing it for now, if you still experience problems with it let me know I'll reopen this

sunnamed434 avatar Jul 24 '24 14:07 sunnamed434