X86 Assembly Language, Part 3.2 [Updated 2019]
- Ge! Stop! What's Segmentation?
The 80186 is a faster version of the 8086. It also has a 20-bit address bus and 16-bit data bus, but has an improved...
Ayoub Faouzi
Ayoub Faouzi is interested to computer viruses and reverse engineering, In the first hand, he likes to study PE packers and protectors, and write security tools. In the other hand, he enjoys coding in python and assembly.
Beta Bot Analysis: Part 2
The bot configuration is encrypted inside the bot and decrypted while the bot is running. In 1.0.2.5, 1.5 and 1.6 versions, BetaBot uses RC4 and some XOR...
Andromeda Bot Analysis part 2
Now, you get the original Andromeda build file. Load the unpacked sample at OllyDBG. As before, after the stack frame at the EP, you see that the malware is...
Andromeda Bot Analysis part 1
Andromeda, also known as Win32/Gamarue, is an HTTP based botnet. It was first spotted in late 2011, and is still at this moment used a lot in herding. It has...
Asprox / Kuluoz Botnet Analysis
Kuluoz, aka Asprox, is a spam botnet that emerged in 2007. It has been known for sending mass of phishing emails used in conjunction with social engineering...
X86 Assembly Language, Part 3.1
For part 2 of this series, please click here.
Programming in a high-level language does not require a detailed knowledge of the system hardware. Assembly language...
X86 Assembly Language, Part 2
Hi Guys, Hi Megabyte, let's get the ball rolling.
In this chapter, I provide a brief introduction to Assembly language programming tools. This chapter is...
x86 Assembly Language, Part 1
As usual, last Friday night I was hanging out with friends, picking up girls in the street and chasing after them. One night, I had a strange feeling just like...
Getting Your Hands Dirty in x86 Assembly Code
For those of you who have been following my eventful career, you already know that this is actually my second published tutorial. Just to bring you up to date,...