Skip to content

Max Kersten

Security through explanation

  • Home
  • Blog
  • Binary Analysis Course
    • Introduction
      • Practical case: Secura Grand Slam CTF “Easy Reverse”
      • The workstation
      • Basic CPU architecture
    • Assembly basics
      • Conditions and loops
      • Practical case: Patch Me 0x01
      • Methods and macros: the call stack
      • Practical case: Buffer Overflow 0x01
      • Crash course
      • Practical case: Crack Me 0x01
      • Practical case: Crack Me 0x02
      • Practical case: Crack Me 0x03
    • Assembly code
      • Hello world
      • Universal Product Code calculator
      • Debugging code
    • Binary types
      • Dot Net
      • Android
      • Browser plug-in
    • Common techniques
      • General techniques
      • Analysing scripts
      • Debugging Dot Net binaries
    • Malware analysis
      • Dot Net RAT
      • Android SMS Stealer
      • LNK & ISESteroids Powershell dropper
      • Emotet droppers
      • Magecart
      • Corona DDoS bot
      • Azorult loader stages
      • Emotet JavaScript downloader
      • Corona Locker
      • ReZer0v4 loader
    • Analysis scripts
      • PowerShell string formatting deobfuscation
      • JavaScript string concatenation deobfuscation
      • Automatic ReZer0 payload and configuration extraction
      • Ghidra script to decrypt strings in Amadey 1.09
      • Ghidra script to decrypt a string array in XOR DDoS
    • Obtaining samples
      • Searching samples
    • Documentation
      • Article structure
    • Resources
    • FAQ
    • Miscellaneous
      • A year in review: 2018-2019
      • A year in review: 2019-2020
      • A year in review: 2020-2021
  • Whitepapers
  • Projects
    • AndroidProjectCreator
    • m3 framework
      • Extending m3
      • Anubis and Cerberus explained
    • API client libraries
      • Hatching Triage Java API client
      • MalShare Java API client
    • MalwareTheFlag
    • Responsible Disclosures
    • MalPull
    • Capricorn
      • Changelog
    • Archive
      • ShoulderSurfer
      • Stringer
      • Gemini
        • Changelog
  • About me
    • News and conferences
    • Privacy Policy

Binary Analysis Course: release notes 0x24

09/02/202111/03/2021 by libra

Additions

  • Added the Ghidra script to decrypt strings in Amadey 1.09 article to the malware analysis chapter.

To contact me, you can e-mail me at [info][at][maxkersten][dot][nl], send me a PM on Reddit, or DM me on Twitter @Libranalysis.

Categories Binary Analysis Course
Post navigation
Illness and inactivity
Hatching Triage Java API client version 1.3 release notes

Recent Posts

  • AndroidProjectCreator 1.5.2-stable release
  • AndroidProjectCreator 1.5.1-stable release
  • My impression of AtHack 2021
  • My impression of BlackHat Europe 2021
  • Releasing the Mobile Malware Mimicking (m3) framework

Archives

  • December 2021
  • November 2021
  • October 2021
  • September 2021
  • August 2021
  • July 2021
  • June 2021
  • May 2021
  • April 2021
  • March 2021
  • February 2021
  • January 2021
  • December 2020
  • November 2020
  • October 2020
  • September 2020
  • August 2020
  • July 2020
  • June 2020
  • May 2020
  • April 2020
  • March 2020
  • February 2020
  • January 2020
  • December 2019
  • November 2019
  • October 2019
  • September 2019
  • August 2019
  • July 2019
  • June 2019
  • May 2019
  • April 2019
  • March 2019
  • February 2019
  • January 2019
  • December 2018
  • November 2018
  • October 2018
  • September 2018
  • August 2018
  • July 2018
  • June 2018
  • January 2018
  • October 2017
  • July 2017
  • June 2017
  • May 2017
  • April 2017

Categories

  • AndroidProjectCreator
  • API Clients
  • Binary Analysis Course
  • Capricorn
  • Conferences
  • Ethics
  • Gemini
  • Lectures
  • m3
  • MageCart
  • MalPull
  • Malware Analysis
  • MalwareTheFlag
  • Responsible Disclosure
  • Reviews
  • Uncategorized
  • Web hacking
  • Whitepapers
© 2022 • GeneratePress
Scroll back to top