Malware Reverse Engineering

Debugging, disassembling and documenting interesting malware...

Followers 11

360 topics in this forum

Sort By

Coreflood/AFcore Trojan Analysis

July 17, 2008 by Teddy Rogers
0 replies

4.2k views
http://www.secureworks.com/research/threat...hreat=coreflood Ted.
Last reply by Teddy Rogers, July 17, 2008
CUT.exe Reverse Engineering Analysis

July 15, 2008 by evilcry
0 replies

4.3k views
Hello I've just released CartellaUnicaTasse.exe An Italian Malware Case Study, it can be downloaded here: http://evilcry.altervista.org/tuts/Mw/CartellaUnicaTasse.pdf if does not works the link, just go on the home of my site and reach it from the link Regards to Tuts4You Community, Evilcry

Last reply by evilcry, July 15, 2008
Delphi virus source code

June 27, 2008 by motan
3 replies

8.2k views
Hi. Anyone knows from where I can get the source code of a virus made in Delphi? Doesn't matter what virus it is as long as I can learn something from it. Thanks a lot.

Last reply by motan, July 11, 2008
Set up VirtualBox for malware analyzing?

June 7, 2008 by high6
8 replies

6.3k views
I wanna get into malware analyzing with a virtual box but I have a few questions. What are some things I should/shouldn't do with the virtual machine that might make it secure/insecure? Will installing guest additions make the virtual box insecure? Will having a shared folder with read only permission make it insecure? And what are some things I should know about VirtualBox before I debug malware?

Last reply by GEEK, June 9, 2008
Storm Worm Analysis

June 3, 2008 by Loki
1 reply

4.5k views
Site : http://honeyblog.org/archives/175-Storm-Wo...esentation.html Paper : http://honeyblog.org/junkyard/paper/08_storm_ITSF.pdf
Last reply by oricode, June 3, 2008
Trojan-Downloader.Win32.Small

May 16, 2008 by Teddy Rogers
2 replies

5.2k views
Trojan-Downloader.Win32.Small or Win32/PolyCrypt Analysis Trojan_DownloaderWin32Small.pdf Ted.
Last reply by evilcry, May 24, 2008
Automatic Patch-Based Exploit Generation

May 23, 2008 by 0000007a
0 replies

4.4k views
source: http://www.cs.cmu.edu/~dbrumley/pubs/apeg.html full pdf article(Worth Reading) http://www.cs.cmu.edu/~dbrumley/pubs/apeg.pdf PS I was not sure where does it fit.

Last reply by 0000007a, May 23, 2008
The Toolbox of the Forensics Examiner

May 17, 2008 by evilcry
3 replies

5.2k views
Hi, Here a little collection of links where you can download the basical Digital Forensics tools.. http://www.opensourceforensics.org/tools/windows.html http://www.forinsect.de/forensics/forensics-tools.html and WinHex http://www.winhex.com/winhex/ In a next post I'll talk about the first procedures of HDD Acquisition. Have a nice Day, Evilcry

Last reply by evilcry, May 19, 2008
Malware Analysis Course

April 17, 2008 by Loki
2 replies

5.3k views
This looks like its worth checking out: As soon as we announced that we were running such a unique course, we received lots of questions about the material. So now we're happy to announce that all the course material from the lectures are publicly available from the course webpage.Now the course is coming to a close. The students are currently working on their final project: designing and implementing an antivirus engine. While this sounds like a daunting task (it takes a lot of time to develop a good engine), we are keeping things reasonable. The main focus is on coming up with a sound design and implementing a basic engine to test it out.Our students have been very succ…

Last reply by ChupaChu, April 17, 2008
W32/stormworm.gen1 Network Analysis

March 25, 2008 by Loki
2 replies

4.6k views
Another paper from the guys at offensive computing http://www.offensivecomputing.net/?q=node/678 PDF direct link : http://www.offensivecomputing.net/papers/j...m-3-23-2008.pdf

Last reply by Loki, March 25, 2008