securedorg.github.io

face.jpg

adding sections 3-5

2017-08-09 18:58:20 -07:00

geometricintro.gif

adding inro image

2017-06-30 15:56:45 -07:00

section2_intro.gif

Update and rename re102_inro.md to re102_intro.md

2017-08-09 12:14:49 -07:00

Section2_AVnames.png

adding av names

2017-08-09 19:02:19 -07:00

Section2_CFFexp.png

Update and rename re102_inro.md to re102_intro.md

2017-08-09 12:14:49 -07:00

Section2_junkdata.png

Update and rename re102_inro.md to re102_intro.md

2017-08-09 12:14:49 -07:00

Section2_virustotal.png

Update and rename re102_inro.md to re102_intro.md

2017-08-09 12:14:49 -07:00

Section3_array1.png

adding sections 3-5

2017-08-09 18:58:20 -07:00

Section3_array2.png

adding sections 3-5

2017-08-09 18:58:20 -07:00

Section3_delphi.gif

adding sections 3-5

2017-08-09 18:58:20 -07:00

Section3_initexe.png

adding sections 3-5

2017-08-09 18:58:20 -07:00

Section3_intro.gif

Update and rename re102_inro.md to re102_intro.md

2017-08-09 12:14:49 -07:00

Section3.1_delphi2.gif

adding sections 3-5

2017-08-09 18:58:20 -07:00

Section3.1_junkstrings.gif

adding sections 3-5

2017-08-09 18:58:20 -07:00

Section3.1_PEstructure.png

adding sections 3-5

2017-08-09 18:58:20 -07:00

Section3.1_record_interesting.png

adding sections 3-5

2017-08-09 18:58:20 -07:00

Section3.1_VirtualAlloc.png

adding sections 3-5

2017-08-09 18:58:20 -07:00

Section4_cipher.png

adding sections 3-5

2017-08-09 18:58:20 -07:00

Section4_functionargs.png

adding sections 3-5

2017-08-09 18:58:20 -07:00

Section4_intro.gif

Update and rename re102_inro.md to re102_intro.md

2017-08-09 12:14:49 -07:00

Section4_looping.png

adding sections 3-5

2017-08-09 18:58:20 -07:00

Section4.1_256bytes.png

adding sections 3-5

2017-08-09 18:58:20 -07:00

Section4.1_keyschedule.png

adding sections 3-5

2017-08-09 18:58:20 -07:00

Section4.1_loop1.png

adding sections 3-5

2017-08-09 18:58:20 -07:00

Section4.1_loop2.png

adding sections 3-5

2017-08-09 18:58:20 -07:00

Section4.1_loop3.png

adding sections 3-5

2017-08-09 18:58:20 -07:00

Section4.1_TheStackFrame2.png

adding sections 3-5

2017-08-09 18:58:20 -07:00

Section4.2_error.gif

adding sections 3-5

2017-08-09 18:58:20 -07:00

Section4.2_HxDextract.png

adding sections 3-5

2017-08-09 18:58:20 -07:00

Section4.2_ReturnAddress.png

adding sections 3-5

2017-08-09 18:58:20 -07:00

Section5_checkname.png

adding sections 3-5

2017-08-09 18:58:20 -07:00

Section5_ControlFlowObfuscation.png

adding sections 3-5

2017-08-09 18:58:20 -07:00

Section5_FunkyStrings.png

adding sections 3-5

2017-08-09 18:58:20 -07:00

Section5_intro.gif

adding sections 3-5

2017-08-09 18:58:20 -07:00

Section5_NameCheck.png

adding sections 3-5

2017-08-09 18:58:20 -07:00

Section5_PEB.gif

adding sections 3-5

2017-08-09 18:58:20 -07:00

Section5_PostStrings.png

adding sections 3-5

2017-08-09 18:58:20 -07:00

Section5_startdebugging.png

adding sections 3-5

2017-08-09 18:58:20 -07:00

Section5.1_20bytesof318.png

uploading missing image

2017-08-09 19:09:49 -07:00

Section5.1_4019E4.png

adding sections 3-5

2017-08-09 18:58:20 -07:00

Section5.1_405272.png

adding sections 3-5

2017-08-09 18:58:20 -07:00

Section5.1_allocate318.png

adding sections 3-5

2017-08-09 18:58:20 -07:00

Section5.1_breakpoint.png

adding sections 3-5

2017-08-09 18:58:20 -07:00

Section5.1_LoadResource.png

adding sections 3-5

2017-08-09 18:58:20 -07:00

Section5.1_move_decrypt.png

adding missing images

2017-08-09 19:18:37 -07:00

Section5.1_resource.png

adding sections 3-5

2017-08-09 18:58:20 -07:00

Section5.1_savingresource.png

adding sections 3-5

2017-08-09 18:58:20 -07:00

Section5.1_Virtualloc318.png

adding sections 3-5

2017-08-09 18:58:20 -07:00

Section5.2_biosjump2.png

adding sections 3-5

2017-08-09 18:58:20 -07:00

Section5.2_biosjump.png

adding sections 3-5

2017-08-09 18:58:20 -07:00

Section5.2_checkbypass.png

adding sections 3-5

2017-08-09 18:58:20 -07:00

Section5.2_checkregistry.png

adding sections 3-5

2017-08-09 18:58:20 -07:00

Section5.2_deviceIOcontroljump.png

adding sections 3-5

2017-08-09 18:58:20 -07:00

Section5.2_Hardware2.gif

adding sections 3-5

2017-08-09 18:58:20 -07:00

Section5.2_hardware.gif

adding sections 3-5

2017-08-09 18:58:20 -07:00

Section5.2_hardwarestrings.png

adding sections 3-5

2017-08-09 18:58:20 -07:00

Section5.2_ModifyFlags.gif

adding sections 3-5

2017-08-09 18:58:20 -07:00

Section5.2_ModifyJump2.gif

adding sections 3-5

2017-08-09 18:58:20 -07:00

Section5.2_PhyicalDriveCheck.png

adding missing images

2017-08-09 19:18:37 -07:00

Section5.2_PhysicalDriveapicall.png

adding sections 3-5

2017-08-09 18:58:20 -07:00

Section5.2_sandboxiedll.png

adding sections 3-5

2017-08-09 18:58:20 -07:00

Section5.2_systembiosregistry.png

adding sections 3-5

2017-08-09 18:58:20 -07:00

Section5.2_vboxstoragesettings.png

adding sections 3-5

2017-08-09 18:58:20 -07:00

Section6_40bytes.png

adding section 6

2017-08-10 14:35:38 -07:00

Section6_addingMZ.png

adding section 6

2017-08-10 14:35:38 -07:00

Section6_compress.png

adding section 6

2017-08-10 14:35:38 -07:00

Section6_compressroutine.gif

adding section 6

2017-08-10 14:35:38 -07:00

Section6_createprocess.png

adding section 6

2017-08-10 14:35:38 -07:00

Section6_decrypted.png

adding section 6

2017-08-10 14:35:38 -07:00

Section6_looping.png

Add files via upload

2017-08-10 16:46:29 -07:00

Section6_offsets.png

adding section 6

2017-08-10 14:35:38 -07:00

Section6_output.png

adding section 6

2017-08-10 14:35:38 -07:00

Section6_paths.png

adding section 6

2017-08-10 14:35:38 -07:00

Section6_RC4Decrypt.png

adding section 6

2017-08-10 14:35:38 -07:00

Section6_script.png

adding section 6

2017-08-10 14:35:38 -07:00

Section6_VirtualAlloc.png

adding section 6

2017-08-10 14:35:38 -07:00

Section7_intro.gif

Update and rename re102_inro.md to re102_intro.md

2017-08-09 12:14:49 -07:00

Section8_Conclusion.png

adding final sections

2017-08-10 15:55:32 -07:00

Section8_intro.gif

Update and rename re102_inro.md to re102_intro.md

2017-08-09 12:14:49 -07:00

SectionFun_intro.gif

Add files via upload

2017-08-10 16:05:05 -07:00

typing.gif

Add files via upload

2017-08-10 16:10:00 -07:00