Manually Unpacking Malware

Intro This post is intended to show one technique that can be used in an attempt to unpack a sample that is suspected to be packed by either a known packer or something unknown or even custom. The...

Nov 23, 2020 Blogging, Malware-Analysis

Digging into obfuscated excel formula code

Intro A large amount of malware that targets businesses is through phishing attacks, and that is no different where I work. We have been getting an influx of excel attachments in phishing document...

Oct 2, 2020 Blogging, Malware-Analysis

Ghidra error: Unable to locate the DIA SDK

Ghidra error on auto-analysis In my flarevm using Windows 10 I have Visual Studio 2019 Community edition installed for building C/C++ programs as needed. When performing the initial auto-analysis ...

Sep 27, 2020 Blogging, Malware-Analysis

Getting Started with Ghidra and FlareVM

Goal This is a quick guide to get you started on installing FlareVM by FireEye and setting up Ghidra for reverse engineering malware. The FlareVM installation is a script you can run that will turn...

Sep 21, 2020 Blogging, Malware-Analysis

OSCE Review

General thoughts With past experience with Offensive Security, the training format was familiar which sped things up a bit for consuming the content. The Offensive Security Certified Expert (OSCE)...

Feb 22, 2018 Blogging, Offensive-Security

SLAE32: Creating custom crypter shellcode