Matryoshka v2 Writeup

31 de março de 2026 · 3595 palavras · 17 minutos · CTF Reversing Windows Malware-Analysis

Just like the nested Russian dolls after which this challenge is named, the deeper you dig, the more layers you’ll uncover. This article is a writeup of Matryoshka v2, a challenge from crackmes.one Reverse Engineering CTF of 2026. Start We are given two files, Doll.dll, LicenseChecker.exe. The first thing to notice is that as LicenseChecker.exe is a small file (12KB) Doll.dll in the other hand is huge (around ~65mb) so we already know something spooky is happening in this dll.