whoami
Malware Must Run
I'm a CTI professional, who loves Malware Analysis, CTI, and automations. This space is where I keep my security write-ups.
ls -lt ./writeups | head
- PMA
You’ll need a 64-bit computer and a 64-bit virtual machine in order to run the malware for these labs, as well as the advanced version of IDA Pro in
- PMA
The purpose of this first lab is to demonstrate the usage of the this pointer. Analyze the malware in Lab20-01.exe.
- PMA
The purpose of this second lab is to demonstrate virtual functions. Analyze the malware in Lab20-02.exe.
- PMA
This third lab is a longer and more realistic piece of malware. This lab comes with a configuration file named config.dat that must be in the same directory as the lab in order to execute properly. An
- PMA
PMA Lab 19-2: Shellcode Analysis
The file Lab19-02.exe contains a piece of shellcode that will be injected into another process and run. Analyze this file.
- PMA
PMA Lab 19-3: Shellcode Analysis
Analyze the file Lab19-03.pdf. If you get stuck and can’t find the shellcode, just skip that part of the lab and analyze file Lab19-03sc.bin using shellcodelauncher.exe.