05.01.2014 Views

Turbo Unpacking: A Journey into Malicious Packers - Hacker Halted

Turbo Unpacking: A Journey into Malicious Packers - Hacker Halted

Turbo Unpacking: A Journey into Malicious Packers - Hacker Halted

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

Case Study : Gpcode<br />

• Gpcode is a ransomware<br />

• It will encrypt a specific sets of files (office<br />

documents, text, pictures etc)<br />

• Uses AES 256 for file encryption<br />

• Uses RSA 1024 to protect the AES key from<br />

Security companies<br />

• Uses custom packers<br />

• http://www.securelist.com/en/blog/6165/Ranso<br />

mware_GPCode_strikes_back

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!