Skip to main content

How to analyze dumped process?

I'm trying to reverse engineer a malware which use a Process Hollow technique. This malware uses an API hashing technique and contains some RC4 encryption algorithm references.

I already knew the entry point of the resumed thread and dumped it out but IDA failed to analyze the dumped code.

What should I do?