Friday, December 3, 2010

Malware analysis

I have been doing a great amount of examining malware samples. A few weeks ago I posted about going to a memory forensics class at HBGary, Inc. As a result I have looked at a handful of malware samples and have begin to make inroads into further understanding.

One key area of study has been close examination of the code and API calls. It can get really involved, but here is a taste of what a sample of code would look like.


Stay tuned as I continue to work this angle more and develop my craft in this area.

No comments: