Encrypted / Packed Bytecode Crypter

Packed_Class_Crypter Obfuscation CRITICAL +8 score

🎮 Minecraft Gameplay Impact

Mod bytecode is encrypted using AES/XOR/DES algorithms and dynamically decrypted at runtime via custom ClassLoaders (defineClass).

🔍 Functions & APIs Analyzed

ClassLoader.defineClass

Dynamically loads decrypted byte array into JVM runtime.

Cipher.doFinal

Decrypts encrypted payload.

💻 Mod Implementation (Dev Source / Mapped)

// Crypter Stub Source
public class StubLoader extends ClassLoader {
    public Class<?> load(byte[] encrypted) throws Exception {
        Cipher c = Cipher.getInstance("AES");
        byte[] decrypted = c.doFinal(encrypted);
        return defineClass(null, decrypted, 0, decrypted.length);
    }
}

⚙️ Decompiled Representation (Vineflower View)

// Decompiled with Vineflower 1.12
public class StubLoader extends ClassLoader {
    public Class load(byte[] encrypted) throws Exception {
        Cipher c = Cipher.getInstance("AES");
        byte[] decrypted = c.doFinal(encrypted);
        return this.defineClass((String)null, decrypted, 0, decrypted.length);
    }
}

🛡️ Bytecode Signature & Static Detection

Matches ClassLoader.defineClass invocations preceded by cryptographic Cipher or XOR decryption loops.