Malware Analysis — Part-2 Basic Dynamic Analysis
Run a malware sample in a controlled lab and trace its behavior with Wireshark, Procmon, and INetSim.
Windows
5 posts tagged “Windows”.
Malware Analysis — Part-1 Basic Static Analysis
Inspect a suspicious binary without executing it using hashes, strings, FLOSS, PEview, and PEStudio.
Windows Privilege escalation through SeBackup / SeRestore
Abuse SeBackup and SeRestore to dump the SAM and SYSTEM hives and escalate to Administrator.
Bypassing UAC through msconfig
Use msconfig's auto-elevation to get a high-integrity shell without triggering a UAC prompt.
Windows persistence through backdoor services
Create and disguise a malicious Windows service to keep access across reboots.
