martedì 17 dicembre 2019

Writing a packer in Sacara

›
Twitter: @s4tan GitHub project: https://github.com/enkomio/sacara Release: https://github.com/enkomio/sacara/releases/latest Sacara...
giovedì 6 giugno 2019

hm0x14 CTF: reversing a (not so simple) crackme

›
Twitter: @s4tan Writeup GitHub project: https://github.com/enkomio/Misc/tree/master/Hm0x14Writeup I'm not used to participate in CTF...
domenica 19 maggio 2019

Sojobo - Yet another binary analysis framework

›
Twitter: @s4tan Sojobo GitHub project: https://github.com/enkomio/Sojobo Sojobo is a new binary analysis framework written in .NET and b...
domenica 11 novembre 2018

Sacara VM Vs Antivirus Industry

›
Twitter: @s4tan Sacara VM GitHub project: https://github.com/enkomio/sacara In this blog post I want to describe a bit my latest side pro...
lunedì 26 febbraio 2018

Analyzing the nasty .NET protection of the Ploutus.D malware.

›
Twitter: @s4tan EDIT: The source code is now online: https://github.com/enkomio/Conferences/tree/master/HackInBo2018 Recently the ATM ma...
domenica 12 novembre 2017

Shed - Inspect .NET malware like a Sir

›
When I start to analyze a new malware, there are some initial tasks that provide a lot of useful information to speedup the analysis. Two ...
sabato 16 settembre 2017

Using a Mealy automata for string obfuscation

›
Obfuscating string is a very important aspect if you want to protect sensitive information. In the following post I'll present an alter...