Reversing Malware Loaders – The Matsnu-A Case Part 2
In the last installment, we examined the PEB Loader Data Structure. We take up the discussion here.
Locate and Isolate the Embedded Decrypted Executable
Once...
Malware analysis
Reversing Malware Loaders – The Matsnu-A Case
The AV industry is growing every day along with the underground industry that produces all types of malware from simple file infectors to more sophisticated...
German Trojans 2
Introduction
In the last article, I discussed in quite some detail how exactly the dropper for Bundestrojaner worked. In my next article what I'd been planning...
Malware Analysis – Follow along reversing the German government’s “Bundestrojaner”
Introduction
I'm reasonably sure that anyone reading this particular article has heard about viruses, worms, trojans and malware; as well as numerous antivirus...
DarkComet analysis – Understanding the Trojan used in Syrian uprising
On February 17th the CNN published an interesting article, where some Syrian's regime opponents claimed that the government was using a Trojan to monitor...
RootSmart Android Malware
Android's increasing popularity, combined with the possibility to create alternative markets, makes this platform a fertile ground for malware authors. While...
AntiCloud Trojan Reverse Engineering Analysis
In this paper we are going to talk about the Anticloud Trojan, also know as the TrojanDropper:Win32/Bohu.A and B variant. This malware originated in China...