Completed
Using Ghidra to Statically XOR Obfuscated Shellcode
Class Central Classrooms beta
YouTube videos curated by Class Central.
Classroom Contents
Current Malware Analysis
Automatically move to the next video in the Classroom when playback concludes
- 1 How-To: Making a Protected VBA Project Viewable with EvilClippy
- 2 Extracting ZIP files from PCAP with Wireshhark & NetworkMiner, plus analysis with CyberChef
- 3 How-To: Installing Oledump in Windows
- 4 Creating an IDA Python Plugin for Static XOR String Deobfuscation
- 5 [11/10/2020] Emotet Maldoc Analysis - Embedded DLL and CertUtil for Base64 Decoding
- 6 Using Ghidra to Statically XOR Obfuscated Shellcode
- 7 Webinar - Installing and Configuring Suricata with Cuckoo Sandbox (04/02/2020)
- 8 Setting Up Cuckoo Sandbox v2.0.7 on Ubuntu 18.04.4 - Part 2
- 9 Setting up Cuckoo Sandbox v2.0.7 on Ubuntu 18.04.4 - Part 1
- 10 Unpacking a Trojan with Ghidra and x64dbg
- 11 Getting Started with Ghidra: Analyzing Process Hollowing Shellcode from a Maldoc
- 12 Unpacking Malware that uses AutoIt
- 13 Using Visual Studio to Debug JavaScript via Windows Script Host (WSH)
- 14 Excel document uses external data connection for next stage payload
- 15 Finding Macro Content in a Spreadsheet Cell
- 16 Analyzing Macros with the Office IDE
- 17 Macro analysis on an Emotet dropper (office document) from 01/17/2020
