Scripting Arbitrary VB6 Applications

While doing malware analysis it is often required to interact with running code to discover how it operates. This can be done through techniques such as API hooking, debugging, system monitoring etc. Some tasks may even require the extraction, reconstitution, or reuse of malware code in order to perform a certain duty. This is common for code such as domain name generation and decryption routines.

Anytime there is an easy way to reuse existing functionality, my interest is piqued. The …

analysis api applications code debugging decryption discover doing domain domain name etc hooking malware malware analysis may monitoring name order reuse scripting system system monitoring techniques