Timeline for Unable to unpack heavly obfuscated malware
Current License: CC BY-SA 3.0
13 events
when toggle format | what | by | license | comment | |
---|---|---|---|---|---|
Jun 1, 2021 at 9:00 | history | tweeted | twitter.com/StackReverseEng/status/1399651935498780674 | ||
Jun 1, 2021 at 3:04 | history | bumped | CommunityBot | This question has answers that may be good or bad; the system has marked it active so that they can be reviewed. | |
Feb 1, 2021 at 2:07 | history | bumped | CommunityBot | This question has answers that may be good or bad; the system has marked it active so that they can be reviewed. | |
Oct 4, 2020 at 1:00 | history | bumped | CommunityBot | This question has answers that may be good or bad; the system has marked it active so that they can be reviewed. | |
Jun 6, 2020 at 0:08 | history | bumped | CommunityBot | This question has answers that may be good or bad; the system has marked it active so that they can be reviewed. | |
Feb 7, 2020 at 0:00 | history | bumped | CommunityBot | This question has answers that may be good or bad; the system has marked it active so that they can be reviewed. | |
Jan 6, 2020 at 16:43 | answer | added | Yennefer | timeline score: 2 | |
Mar 31, 2018 at 9:12 | comment | added | Michael Pittino |
Tip: ConfuserEx will unpack the target during runtime and keep it in memory. You can dump it using dnSpy Debugging. I think the name of the unpacked module was koi or something like that.
|
|
Dec 27, 2017 at 10:36 | comment | added | Potato | I'm assuming the memory gets corrupted there is no way of knowing since the file is so highly obfuscated I have a hard time knowing what exactly got destroyed. I am new to the field so even if there is a way of knowing I dont hold the skill set for it | |
Dec 27, 2017 at 10:20 | comment | added | Vladislav Ivanov | What exactly do you mean by "destroying"? | |
Dec 27, 2017 at 8:58 | history | edited | 0xec | CC BY-SA 3.0 |
Added .net tag, Made link indirect
|
Dec 27, 2017 at 8:38 | review | First posts | |||
Dec 27, 2017 at 12:04 | |||||
Dec 27, 2017 at 8:34 | history | asked | Potato | CC BY-SA 3.0 |