无壳
查看ida
可以看得出是base64,而且是换表的。
完整exp:
import base64
result='5Mc58bPHLiAx7J8ocJIlaVUxaJvMcoYMaoPMaOfg15c475tscHfM/8=='
biao=str.maketrans('qvEJAfHmUYjBac+u8Ph5n9Od17FrICL/X0gVtM4Qk6T2z3wNSsyoebilxWKGZpRD','ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/')
flag=base64.b64decode(result.translate(biao))
print(flag)