/explore
|
You are here 
|
blog.dingusxmcgee.com | ||
| | | | |
x0rb3l.github.io
IntroductionIn this article I will be examining a Windows executable malware specimen. Based on a couple reports from automated malware sandboxes, the specimen drops multiple files to disk and calls out to multiple domains and IP addresses.The purpose of this article is to give readers a look into malware reverse engineering using static analysis, behavioral analysis, and code analysis. This is Part 1 of several more articles to come.The specimen in question is a Windows PE (Portable Executable) named setup.exe. You can find it's hashes below.MD5: d1b2c8ddca2f8dd02e2c132153055084SHA-1: 21c011ac7406eef048c175f5887e4eb885c050d6SHA256: 506c2f513d64242fcb20ccff8c26c0ed1755fe9120b984c29ba224b311d635c3I pulled this malware from Any.Run which contains nearly 75,000... |
|
| | | | | ||
| | | | |
www.redblue.team
There's certainly no shortage of malware in Ukraine right now! One of my resolutions for the New Year is to spend more time conducting ... |
|
| | | | | ||
| | | | |
wsummerhill.github.io
Malware Development Introduction (aka Malware Dev 101), Part 1 |
|
| | | | | ||
| | | | |
www.timdbg.com
[AI summary] This article provides an introduction to reading x86 assembly language, emphasizing its importance for understanding how programs operate at a fundamental level. It covers the basics of assembly syntax, common instructions, and practical tools for reading and analyzing assembly code. The author explains that while assembly is often viewed as complex, it's actually more approachable than many believe, especially for debugging and reverse engineering tasks. The article also highlights the differences between Intel and AT&T syntax, the structure of assembly instructions, and the role of registers and memory addressing in x86 architecture. |
|
| | | |||
