Turbo Unpacking: A Journey into Malicious Packers - Hacker Halted

ePAPER READ

DOWNLOAD ePAPER

hackerhalted.com

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

START NOW

Case Study : CodecPack

• Advertising Botnet

• Downloads Adware and clickers

• Uses custom packers

• http://www.securelist.com/en/analysis/20479

2172/The_Advertising_Botnet

Weaponizing Lisp - John Kanen Flowers - Hacker Halted

Battery Firmware Hacking - Hacker Halted

DIY SCADA Security - Learn how to build your own ... - Hacker Halted

Blackberry Proof-of-Concept: Malicious Applications - Hacker Halted

Exploiting the Top 10 Database Vulnerabilities and ... - Hacker Halted

Cyber Forensics in the Cloud - Hacker Halted

How to gain access to computers and virtual machines - Hacker Halted

FedRAMP – How the Feds Plan to Manage Cloud - Hacker Halted

Hackers Can Kill You - Majid Sarrafzadeh - Hacker Halted

Penetration Testing in a Virtualized Environment - Hacker Halted

TRAINING CLASS CHANGE REQUEST FORM - Hacker Halted

Case Study : SpyEye • Infamous Banking Trojan • Remote configuration file • Targets lots of banks • Able to inject html/javascript code into the banking site on the local machine • Using the sample provided for the Honeynet Challenge • Uses custom packers

Case Study : CodecPack • Advertising Botnet • Downloads Adware and clickers • Uses custom packers • http://www.securelist.com/en/analysis/20479 2172/The_Advertising_Botnet

Page 1 and 2: Turbo unpacking: A Journey into Mal
Page 3 and 4: Introduction to « Packers » PECOF
Page 5 and 6: Y0da Crypt Dot Fake Signer • Obfu
Page 7 and 8: With compression Packers UPX Protec
Page 9 and 10: With compression Packers UPX Protec
Page 11 and 12: Standard packed File layout • Ori
Page 13 and 14: Challenges of Malicious Packers •
Page 15: Case Study : Hflux • Peer 2 Peer
Page 19 and 20: Conclusion • Don’t bother •

Turbo Unpacking: A Journey into Malicious Packers - Hacker Halted

Create successful ePaper yourself

Delete template?

Save as template?