OALabs | IDA Pro Tutorial - Reverse Engineering Dynamic Malware Imports @OALABS | Uploaded 4 years ago | Updated 3 hours ago
A step-by-step IDA Pro tutorial on reverse engineering dynamic imports in malware. Expand for more...
-----
OALABS DISCORD
discord.gg/6h5Bh5AMDU
OALABS PATREON
patreon.com/oalabs
OALABS TIP JAR
ko-fi.com/oalabs
OALABS GITHUB
github.com/OALabs
UNPACME - AUTOMATED MALWARE UNPACKING
unpac.me/#
-----
Automated Malware Unpacking
unpac.me
Clean unpacked REvil ransomware sample that we analyze:
5f56d5748940e4039053f85978074bde16d64bd5ba97f6f0026ba8172cb29e93
malshare.com/sample.php?action=detail&hash=890a58f200dfff23165df9e1b088e58f
Part 1 - Unpacking REvil malware:
youtu.be/0raUaL4TIo4
C++ Reverse Engineering Tutorial
youtu.be/o-FFGIloxvE
Corkami PE102 visual poster:
github.com/corkami/pics/tree/master/binary/pe102
Dr. Fu's Security Blog
http://fumalwareanalysis.blogspot.com/2011/12/malware-analysis-tutorial-8-pe-header.html
Feedback, questions, and suggestions are always welcome : )
Sergei twitter.com/herrcore
Sean twitter.com/seanmw
As always check out our tools, tutorials, and more content over at openanalysis.net
#ReverseEngineering #IDAPro #MalwareAnalysis
A step-by-step IDA Pro tutorial on reverse engineering dynamic imports in malware. Expand for more...
-----
OALABS DISCORD
discord.gg/6h5Bh5AMDU
OALABS PATREON
patreon.com/oalabs
OALABS TIP JAR
ko-fi.com/oalabs
OALABS GITHUB
github.com/OALabs
UNPACME - AUTOMATED MALWARE UNPACKING
unpac.me/#
-----
Automated Malware Unpacking
unpac.me
Clean unpacked REvil ransomware sample that we analyze:
5f56d5748940e4039053f85978074bde16d64bd5ba97f6f0026ba8172cb29e93
malshare.com/sample.php?action=detail&hash=890a58f200dfff23165df9e1b088e58f
Part 1 - Unpacking REvil malware:
youtu.be/0raUaL4TIo4
C++ Reverse Engineering Tutorial
youtu.be/o-FFGIloxvE
Corkami PE102 visual poster:
github.com/corkami/pics/tree/master/binary/pe102
Dr. Fu's Security Blog
http://fumalwareanalysis.blogspot.com/2011/12/malware-analysis-tutorial-8-pe-header.html
Feedback, questions, and suggestions are always welcome : )
Sergei twitter.com/herrcore
Sean twitter.com/seanmw
As always check out our tools, tutorials, and more content over at openanalysis.net
#ReverseEngineering #IDAPro #MalwareAnalysis
![Your VPN Sucks for Malware Analysis [ Twitch Rant ]](https://i.ytimg.com/vi/hR5YOV__gGk/hqdefault.jpg "Your VPN Sucks for Malware Analysis [ Twitch Rant ]
Why are you using a VPN? What is the right VPN to use when you want to call out to a C2 while analyzing malware? Why are you running?! These questions and more will be answered!
See more actual reverse engineering on... https://www.patreon.com/oalabs
OALABS DISCORD
https://discord.gg/6h5Bh5AMDU
OALABS PATREON
https://www.patreon.com/oalabs
Twitch
https://www.twitch.tv/oalabslive
OALABS GITHUB
https://github.com/OALabs
UNPACME - AUTOMATED MALWARE UNPACKING
https://www.unpac.me/#/")
![What is The Future of Reverse Engineering [ Reverse Engineering AMA ]](https://i.ytimg.com/vi/lilIOWzDeBA/hqdefault.jpg "What is The Future of Reverse Engineering [ Reverse Engineering AMA ]
What is the future of reverse engineering? What should we prepare for?
Big thanks to all the reverse engineers who helped us put this together!
Rattle (Jesko)
https://twitter.com/huettenhain
https://github.com/binref/refinery
Jordan (psifertex)
https://twitter.com/psifertex
https://binary.ninja/
Karsten
https://twitter.com/struppigel
https://www.youtube.com/c/MalwareAnalysisForHedgehogs
Drakonia
https://twitter.com/dr4k0nia
https://dr4k0nia.github.io/
C3rb3ru5
https://twitter.com/c3rb3ru5d3d53c
https://c3rb3ru5d3d53c.github.io/
Josh
https://twitter.com/jershmagersh
https://pwnage.io/
Dodo
https://twitter.com/dodo_sec
https://github.com/dodo-sec
Washi
https://twitter.com/washi_dev
https://washi.dev/
OALABS PATREON
https://www.patreon.com/oalabs
OALABS DISCORD
https://discord.gg/6h5Bh5AMDU
Twitch
https://www.twitch.tv/oalabslive
OALABS GITHUB
https://github.com/OALabs
UNPACME - AUTOMATED MALWARE UNPACKING
https://www.unpac.me/#/")
![Advantages Of Intermediate Language (IL) Over Pseudo C Code [ Reverse Engineering AMA ]](https://i.ytimg.com/vi/mGktcLO166Q/hqdefault.jpg "Advantages Of Intermediate Language (IL) Over Pseudo C Code [ Reverse Engineering AMA ]
What are the advantages of using intermediate language over pseudo C? When should you use each?
Big thanks to all the reverse engineers who helped us put this together!
Rattle (Jesko)
https://twitter.com/huettenhain
https://github.com/binref/refinery
Jordan (psifertex)
https://twitter.com/psifertex
https://binary.ninja/
Karsten
https://twitter.com/struppigel
https://www.youtube.com/c/MalwareAnalysisForHedgehogs
Drakonia
https://twitter.com/dr4k0nia
https://dr4k0nia.github.io/
C3rb3ru5
https://twitter.com/c3rb3ru5d3d53c
https://c3rb3ru5d3d53c.github.io/
Josh
https://twitter.com/jershmagersh
https://pwnage.io/
Dodo
https://twitter.com/dodo_sec
https://github.com/dodo-sec
Washi
https://twitter.com/washi_dev
https://washi.dev/
OALABS PATREON
https://www.patreon.com/oalabs
OALABS DISCORD
https://discord.gg/6h5Bh5AMDU
Twitch
https://www.twitch.tv/oalabslive
OALABS GITHUB
https://github.com/OALabs
UNPACME - AUTOMATED MALWARE UNPACKING
https://www.unpac.me/#/")
![Tips For Writing a .NET Static Config Extractor for Malware [ Reverse Engineering AMA ]](https://i.ytimg.com/vi/n435uL01T_E/hqdefault.jpg "Tips For Writing a .NET Static Config Extractor for Malware [ Reverse Engineering AMA ]
What are some tips for dealing with static config extraction of .NET malware?
Big thanks to all the reverse engineers who helped us put this together!
Rattle (Jesko)
https://twitter.com/huettenhain
https://github.com/binref/refinery
Jordan (psifertex)
https://twitter.com/psifertex
https://binary.ninja/
Karsten
https://twitter.com/struppigel
https://www.youtube.com/c/MalwareAnalysisForHedgehogs
Drakonia
https://twitter.com/dr4k0nia
https://dr4k0nia.github.io/
C3rb3ru5
https://twitter.com/c3rb3ru5d3d53c
https://c3rb3ru5d3d53c.github.io/
Josh
https://twitter.com/jershmagersh
https://pwnage.io/
Dodo
https://twitter.com/dodo_sec
https://github.com/dodo-sec
Washi
https://twitter.com/washi_dev
https://washi.dev/
OALABS PATREON
https://www.patreon.com/oalabs
OALABS DISCORD
https://discord.gg/6h5Bh5AMDU
Twitch
https://www.twitch.tv/oalabslive
OALABS GITHUB
https://github.com/OALabs
UNPACME - AUTOMATED MALWARE UNPACKING
https://www.unpac.me/#/")
