84 matches found
Targeted Malware Reverse Engineering Workshop follow-up. Part 2
If you have read our previous blogpost "Targeted Malware Reverse Engineering Workshop follow-up. Part 1", you probably know about the webinar we conducted on April 8, 2021, with Kaspersky GReATs Ivan Kwiatkowski and Denis Legezo, to share best practices in reverse engineering and demonstrate...
GDA Android Reversing Tool - A New Decompiler Written Entirely In C++, So It Does Not Rely On The Java Platform, Which Is Succinct, Portable And Fast, And Supports APK, DEX, ODEX, Oat
Here, a new Dalvik bytecode decompiler, GDA（this project started in 2013 and released its first version 1.0 in 2015 at www.gda.com: 9090 , is proposed and implemented in C++ to provide more sophisticated, fast and convenient decompilation support. GDA is completely self-independent and very stabl...
PowerShell Obfuscation Ups the Ante on Antivirus
A new malware sample using a rare obfuscation technique has been spotted that uses the features of PowerShell, a tool that comes built in to Microsoft Windows. Analysis from Cylance shows that the tactic succeeds in bypassing most antivirus products. Cylance researchers stumbled across a malware...
Analysis antivirus BitDefender of an integer overflow vulnerability, the first part-the vulnerability warning-the black bar safety net
In software vulnerabilities“Pantheon”, the security software vulnerability is considered other than software vulnerabilities in more serious. We rely on security software to defend against attackers, so our defensive system in the vulnerability only allows an attacker to cause harm, but also will...
Analyzing malware by API calls
Over the last quarter, we've seen an increase in malware using packers, crypters, and protectors—all methods used to obfuscate malicious code from systems or programs attempting to identify it. These packers make it very hard, or next to impossible to perform static analysis. The growing number o...
APKiD - Android Application Identifier for Packers, Protectors, Obfuscators and Oddities
APKiD gives you information about how an APK was made. It identifies many compilers, packers, obfuscators, and other weird stuff. It's PEiD for Android. For more information on what this tool can be used for, check out: Android Compiler Fingerprinting Detecting Pirated and Malicious Android Apps...
Simple Static Malware Analyzer: SSMA
Simple Static Malware Analyzer SSMA is a simple malware analyzer written in Python 3. Features: Analyze PE file’s header and sections number of sections, entropy of sections/PE file, suspicious section names, suspicious flags in the characteristics of the PE file, etc. Searches for possible...
SSMA - Simple Static Malware Analyzer
SSMA is a simple malware analyzer written in Python 3. Features: Searches for websites, e-mail addresses, IP addresses in the strings of the file. Looks for Windows functions commonly used by malware. Get results from VirusTotal and/or upload files. Malware detection based on Yara-rules -...
Official Green Bay Packers - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities
HackApp vulnerability scanner discovered that application Official Green Bay Packers published at the 'play' market has multiple vulnerabilities...
packers.com XSS vulnerability
Vulnerable URL: http://www.packers.com/media-center/videos/Favres-Greatest-Games-Beats-Bears-on-Bad-Ankle/cd785f70-7abe-4515-8fa4-51160cbaa921%22%3E%3Cbody%20onload=alert'XSSPOSED'%3E Details: Description| Value ---|--- Patched:| Yes, at 10.08.2015 Latest check for patch:| 10.08.2015 01:22 GMT...
Linux Kernel < 2.6.11.5 BLUETOOTH Stack Local Root Exploit
No description provided by source. / LINUX KERNEL Not tainted VLI EFLAGS: 00010286 2.6.9 EIP is at btsockcreate+0x3d/0x13...
The Trojan uses the“free kill”evading anti-virus techniques-vulnerability warning-the black bar safety net
Today, talk about horses can be described as color change. Trojan indeed than the conventional virus more ruthless, monitoring your operation, devouring your privacy, destroy your data. We install the latest antivirus software and daily patch updates, and the firewall is always protected, but why...
Trojan free kill technology the large inventory and antivirus settings-vulnerability and early warning-the black bar safety net
In the antivirus software growing strong campaign, with a Only is not killing the Trojans, has become the the majority of hacker enthusiasts desire. But is not killing the Trojans, released that day, it means that it has 命不久已 it. Teach a man to fish than teach a man to fish, so we launched thisfr...
About Posion Ivy 2.3.0 free kill points idea-vulnerability warning-the black bar safety net
Originally wanted to send to the original area, but to see other places also have the discussion of, and the method is certainly a lot, so I'll put here, please have a idea of the friends in here big comments! Today in foreign countries, the IRC saw a few foreigners in the discussion of the PI2. ...
Trojan free kill methods bloopers-vulnerability warning-the black bar safety net
In fact,this can not be considered original, all you are aware of the knowledge,just following some of the experience. 昤. 姲 黡 M8? Probably write some Chaos. y? 瑍 k 渄? G�o 澐 W 洘 1,Extra rare shell. �Winter�詷"$+? aspack,upx relatively famous,it is not recommended to use. 4?! Smoke ? A? U8 傺 sell Wh...
Trojan“add/shelling”implementation-vulnerability warning-the black bar safety net
Why the“plus/shelling”for? For hackers, this technology is clearly applied to the disguised Trojan on the client, the purpose is to prevent is antivirus anti-tracking Avira and is tracking to debug, but also to prevent the algorithm of the program is the others for static analysis. Used pe-scan t...
Trojan free kill technology the large inventory and antivirus settings-vulnerability and early warning-the black bar safety net
In the antivirus software growing strong campaign, with a Only is not killing the Trojans, has become the the majority of hacker enthusiasts desire. But is not killing the Trojans, released that day, it means that it has 命不久已 it. Teach a man to fish than teach a man to fish, so we launched thisfr...
Analysis of black anti-CD QQ black hand-vulnerability warning-the black bar safety net
Look at the hack line of Defense for the official announcement, 6 issues disc this month I promote the column, the moving network vulnerabilities using the animation included with the tool will make the antivirus Alarm, tips for Trojan-PSW. Win32. QQShou. ed. A thought, my old magic computer blac...
Free kill often with a few important tools-vulnerability warning-the black bar safety net
C32Asm V0. 4. 1 2 C32Asm is set reverse assemble, 1 6 hex tools, Hiew modify the features and integration PE Explorer 1.98 Powerful resource tool, can directly Browse and modify the software resources, including menus, dialog boxes, string tables, etc.; in addition, also equipped with W32DASM...
Rookie no longer dish! Does not know programming can also play a personal version of the Trojan horse-vulnerability warning-the black bar safety net
Whether you like to play the Trojans?? As the domestic Big Brother“ice”it. This need not I introduced,even the idiot all know! Flirtatious babe“Guangdong University of Foreign Studies girls”! Water flowsbe afraid of the“Guangdong University of Foreign Studies Ghost”! I'm afraid I'm afraid! LAN...