Experimental News Clipping Site

Tag: reverse

  • Hacker News: GoStringUngarbler: Deobfuscating Strings in Garbled Binaries

    —

    by

    Kurt Seifried
    in

    Source URL: https://cloud.google.com/blog/topics/threat-intelligence/gostringungarbler-deobfuscating-strings-in-garbled-binaries Source: Hacker News Title: GoStringUngarbler: Deobfuscating Strings in Garbled Binaries Feedly Summary: Comments AI Summary and Description: Yes Summary: This text details the challenges associated with analyzing malware written in Go that utilizes the garble obfuscator, focusing on the introduction of the GoStringUngarbler tool, which automates the deobfuscation process of string literals.…

  • Cloud Blog: GoStringUngarbler: Deobfuscating Strings in Garbled Binaries

    —

    by

    Kurt Seifried
    in

    Source URL: https://cloud.google.com/blog/topics/threat-intelligence/gostringungarbler-deobfuscating-strings-in-garbled-binaries/ Source: Cloud Blog Title: GoStringUngarbler: Deobfuscating Strings in Garbled Binaries Feedly Summary: Written by: Chuong Dong Overview In our day-to-day work, the FLARE team often encounters malware written in Go that is protected using garble. While recent advancements in Go analysis from tools like IDA Pro have simplified the analysis process, garble…

  • Unit 42: Uncovering .NET Malware Obfuscated by Encryption and Virtualization

    —

    by

    Kurt Seifried
    in

    Source URL: https://unit42.paloaltonetworks.com/?p=138493 Source: Unit 42 Title: Uncovering .NET Malware Obfuscated by Encryption and Virtualization Feedly Summary: Malware authors use AES encryption and code virtualization to evade sandbox static analysis. We explore how this facilitates spread of Agent Tesla, XWorm and more. The post Uncovering .NET Malware Obfuscated by Encryption and Virtualization appeared first on…

  • Slashdot: 27-Year-Old EXE Became Python In Minutes. Is AI-Assisted Reverse Engineering Next?

    —

    by

    Kurt Seifried
    in

    Source URL: https://developers.slashdot.org/story/25/03/01/2211210/27-year-old-exe-became-python-in-minutes-is-ai-assisted-reverse-engineering-next?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: 27-Year-Old EXE Became Python In Minutes. Is AI-Assisted Reverse Engineering Next? Feedly Summary: AI Summary and Description: Yes Summary: This text discusses a remarkable case of using AI (Claude 3.7) to reverse-engineer a 27-year-old Visual Basic application and rewrite it in Python. This showcases the potential of generative AI…

  • Hacker News: Yes, Claude Code can decompile itself. Here’s the source code

    —

    by

    Kurt Seifried
    in

    Source URL: https://ghuntley.com/tradecraft/ Source: Hacker News Title: Yes, Claude Code can decompile itself. Here’s the source code Feedly Summary: Comments AI Summary and Description: Yes **Summary:** The text discusses the implications of using AI in software engineering, specifically focusing on a newly released AI coding assistant named Claude Code by Anthropic. It highlights the use…