Unpacking NullMixer - Identifying and Unraveling ASPack (Part 2) | allinfosecnews.com

Feb. 3, 2023, 7 p.m. | Dr Josh Stroschein

Dr Josh Stroschein www.youtube.com

This is the second video in a three part series. In this video we'll complete our first-look analysis of NullMixer by unpacking the main binary, which uses ASPack. We'll discuss some common unpacking patterns in the code using IDA Pro, then switch to x32dbg to perform the unpacking.

Miss part 1? Here ya go: https://youtu.be/92jKJ_G_6ho

Tools used: IDA Pro, x32dbg, Scylla

Sample SHA256: 7a4df2fc82c0b553d0b703f51635fd62cf02553706f942c66d752c1d8fae207b

analysis binary code discuss ida ida pro main patterns pro scylla series sha256 switch tools unpacking video

More from www.youtube.com / Dr Josh Stroschein

🔴 Malware Mondays Episode 02 - Investigating Processes with Process Explorer and System Informer 4 days, 18 hours ago | www.youtube.com

basics episode explorer focus +10

MM#02 - Uncover Program Behavior! Build a Sample Program to Investigate w/ Process Explorer | … 1 week, 2 days ago | www.youtube.com

basics build episode explorer +12

Malware Mondays?!? Learn more 2 weeks, 1 day ago | www.youtube.com

Malware Mondays Episode 01 - Identifying Malicious Activity in Process Monitor (ProcMon) Data 3 weeks, 5 days ago | www.youtube.com

artifact data goal learn +11

MM#01 - How to Capture Malicious Activity with Process Monitor! Using ProcMon with Amadey Malware 1 month ago | www.youtube.com

amadey artifacts capture data +11

Malware Mondays Episode 01 - Identifying Malicious Activity in Process Monitor (ProcMon) Data 1 month ago | www.youtube.com

artifact data goal learn +11

Why Do You Need to Know Assembly to Use IDAPro or Ghidra? Exploring disassembly and … 1 month, 1 week ago | www.youtube.com

assembly disassembly effectively ghidra +9

Ease Shellcode Analysis with SCLauncher! Learn how-to wrap shellcode into a PE file 1 month, 2 weeks ago | www.youtube.com

analysis debugging development easy +18

Customizing FakeNet-NG for Malicious Document Analysis! How to modify the web root 1 month, 3 weeks ago | www.youtube.com

analysis can default dive +16

Social Engineer For Reverse Engineering Exploit Study

@ Independent study | Remote

View on infosec-jobs.com

Security Engineer II- Full stack Java with React

@ JPMorgan Chase & Co. | Hyderabad, Telangana, India

View on infosec-jobs.com

Cybersecurity SecOps

@ GFT Technologies | Mexico City, MX, 11850

View on infosec-jobs.com

Senior Information Security Advisor

@ Sun Life | Sun Life Toronto One York

View on infosec-jobs.com

Contract Special Security Officer (CSSO) - Top Secret Clearance

@ SpaceX | Hawthorne, CA

View on infosec-jobs.com

Early Career Cyber Security Operations Center (SOC) Analyst

@ State Street | Quincy, Massachusetts

View on infosec-jobs.com