[XignCode] Log decrypt

07/02/2015 15:41 psch0#1
yo guys, with a byte array wich is key you can decrypt some of xigncode log ^^

[ Key ]


[ How to decrypt ]

Basicaly all the encryption algorythm is XoRing every byte with a KEY, as far i got this every encrypted byte has it's own key
so for a single encrypted log file there is a message with a maximum size of 320 bytes.

First 68 bytes are HEADER
Other bytes are Log MESSAGE

here is a image of example below

[Only registered and activated users can see links. Click Here To Register...]

HEADER is always the same, it's never changing and it does NOT contain any sensetive information ^^
MESSAGE you start decrypting it with KEY, it won't work if you would start decrypt it with HEADER, you will get those junk bytes

Decryption Algorythm in program (will look something like this)

[ Some log i decrypted ]

[ Info ]

Remember, with this KEY you are not able to decrypt everysingle byte in log! ^^
please don't flame me hard, i've worked hard to get those bytes and trying to understood the algorythm ;)
01/08/2016 00:18 pkedpker#2
Anyone know the new XOR keys? seems doesn't work for newest xigncode
01/15/2016 12:37 psch0#3
Quote:
Originally Posted by pkedpker View Post
Anyone know the new XOR keys? seems doesn't work for newest xigncode
try to trace Kernel32.CreateFile -> lpFileName "xigncode.log"
search in that direction :)
01/10/2017 19:14 ugurkib#4
hi guys. i have an error. xigncode.log which program says me error .

[Only registered and activated users can see links. Click Here To Register...]
01/10/2017 20:44 Ⓜiku Ⓗatsune#5
Quote:
Originally Posted by ugurkib View Post
hi guys. i have an error. xigncode.log which program says me error .

[Only registered and activated users can see links. Click Here To Register...]
Attach (No Link!) <-- .log to [Only registered and activated users can see links. Click Here To Register...] in the eMail.
You will get an auto answer by bot and tell you what is detected.
12/07/2018 18:04 srwilson987#6
i am having an error with xigncode but i send them the email and everything they say is to install an antivirus scan and reboot your pc.