Skip to content

2014 class material
Compare
Choose a tag to compare
@knowmalware knowmalware released this 07 Mar 03:23
· 25 commits to master since this release
1.2
c0d35d1

Changes:

  • Added common string encodings (UTF-8, UTF-16, etc)
  • Added packer categories and references.
  • Updated Generic RE Algorithm
  • Added instructions for using PDFStreamDumper to extract shellcode from a PDF
  • Minor formatting changes
  • Added sdhash reference to Triage section
  • Added shellcode example-specific decoding IDC script

As before, the Malware ZIP is an encrypted zip with a password of "infected" (without the quotes). All of the .exe files have been renamed to .ex_.

Assets 5
Loading