reverse-engineering-malicious-code-tips 
Lenny Zeltser
SEPTEMBER 7, 2017
This cheat sheet outlines tips for reversing malicious Windows executables via static and dynamic code analysis with the help of a debugger and a disassembler. Overview of the Code Analysis Process. Identify strings and API calls that highlight the program’s suspicious or malicious capabilities.
Lenny Zeltser
OCTOBER 13, 2020
REMnux ® offers a curated collection of free tools for reverse-engineering or otherwise analyzing malicious software. For another perspective on the REMnux tools you can use for examining malicious software, see the one-page REMnux Usage Tips cheat sheet.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Lenny Zeltser
JANUARY 6, 2021
Malware analysis sits at the intersection of incident response, forensics, system and network administration, security monitoring, and software engineering. As someone who’s helped thousands of security professionals learn how to analyze malware at SANS Institute , I have a few tips for how you can get started.
Krebs on Security
OCTOBER 12, 2021
Lawrence Abrams of Bleeping Computer writes that the flaw could be used to steal data or install malware, and that soon after Apple patched the bug security researcher Saar Amar published a technical writeup and proof-of-concept exploit that was derived from reverse engineering Apple’s patch.
Security Boulevard
DECEMBER 6, 2022
The malware is heavily obfuscated which makes it very difficult and time consuming to reverse engineer and analyze. Zscaler ThreatLabz has reverse engineered the various obfuscation techniques used by DanaBot and developed a set of tools using IDA Python scripts to assist with binary analysis. Technical Analysis.
eSecurity Planet
NOVEMBER 18, 2021
A payload is a piece of code that executes when hackers exploit a vulnerability. key-loggers) to steal data and other malicious acts. One of the most common attacks is to send emails with an attached.pdf file containing a malicious payload that will install a backdoor. Payloads and Reverse TCP Shell.
Security Affairs
SEPTEMBER 5, 2022
Following the recent Twilio hack leading to the leakage of 2FA (OTP) codes, cybercriminals continue to upgrade their attack arsenal to orchestrate advanced phishing campaigns targeting users worldwide. EvilProxy actors are using Reverse Proxy and Cookie Injection methods to bypass 2FA authentication – proxyfying victim’s session.
Expert insights. Personalized for you.
111 
Let's personalize your content