63 Problems But Malware Ain’t One: 8ca23d7bdf520c3e7ac538c1ceb7b555 (Unpacked Sample)

Hello paranoids Recovered from my previous post? No? Great! My overall objectives for the previous post were to: Show you how to unpack a malware Unpacking constructions (e.g. anti-debugging, shellcode, dynamic resolution of dependencies) On this post, i intend to: Go over some network/host tracks left by the malware Malware supported commands and features The … Continue reading 63 Problems But Malware Ain’t One: 8ca23d7bdf520c3e7ac538c1ceb7b555 (Unpacked Sample)

Advertisements

63 Problems But Malware Ain’t One: 8ca23d7bdf520c3e7ac538c1ceb7b555 (Unpacking)

Hello paranoids  As i referred on my previous post, i have started a Reverse Engineering/Malware Analysis journey. One of the topics i find most interesting about malware is packing. A packer is an algorithm that manipulates a simple binary and adds one or more of the following features (this is not an exhaustive list): cryptors and/or compressors: e.g. … Continue reading 63 Problems But Malware Ain’t One: 8ca23d7bdf520c3e7ac538c1ceb7b555 (Unpacking)

Client-side anti-bot mechanism #exerciseinfutility

Hello paranoids Today, i bring a laughable case of input verification and anti-bot measures. Let us get straight to the point, shall we? When checking an online contest , i stumbled across this (the form is from a Portuguese website and was on Portuguese as well): BI is an 8-digits string representing unequivocally a citizen (citizen ID of … Continue reading Client-side anti-bot mechanism #exerciseinfutility

Technicolor TG784n v3 hidden dangers and privilige escalation (made simple)

If you are reading this post: congratulations!, you are reading my first post ever on a blog. I am pretty sure we share (if you like security) some concerns regarding internet-connected devices in your house, specially those you can't understand correctly (in my case smartphones and ISP devices). This post regards the latter since, even … Continue reading Technicolor TG784n v3 hidden dangers and privilige escalation (made simple)