I'm trying to follow along with this tutorial which is using IDA in it's example. https://0ffset.net/reverse-engineering/malware-analysis/common-shellcode-techniques/
Hash: 9d7e34250477acf632c6c32fc2c50d3b
In the example, after decryption of the stage 2 this is the result:
When I repeat the same steps with Ghidra I get the following result:
I've been following the assembly trying to see if I could figure out what when wrong or what is going on with no results yet.
While searching, I came across these references: https://c9x.me/x86/html/file_module_x86_id_139.html https://en.wikipedia.org/wiki/HLT_(x86_instruction)
It would be appreciated if someone could point me in the right direction.