Completed
Process Hollowing (RunPE)
Class Central Classrooms beta
YouTube videos curated by Class Central.
Classroom Contents
Automated Extraction of Configuration and Payloads from Sophisticated Malware
Automatically move to the next video in the Classroom when playback concludes
- 1 Intro
- 2 A bit of background..
- 3 Malware Obfuscation
- 4 Manual Approach
- 5 Automated Analysis
- 6 Techniques & tools from manual analysis
- 7 Debugger
- 8 Dumper
- 9 Import Reconstruction
- 10 CAPE Walkthrough Demo Plug
- 11 DLL Side loading
- 12 Extracting/loading modules in memory
- 13 Process injection: Shellcode or DLL
- 14 Process Hollowing (RunPE)
- 15 Executable Packers/Custom Crypto
- 16 Current Coverage
- 17 CAPE Extensibility
- 18 How do you make a package? CAPE API
- 19 Config Parsing
- 20 CAPE Resources
