memory region | DataProtectionCenter.com

The Mystery of Duqu: Part Five

15

Nov

2011

Driver The driver is the first component of Duqu to be loaded in the system. As we discovered, the driver and other components of malware are installed with a dropper exploiting a 0-day vulnerability (CVE-2011-3402). The driver is registered in the HKLM\System\CurrentControlSet\Services\ registry path. The exact name of the registry key varies in different versions […]

Category General Written by Securelist / Blog 0 Comments

A Technical Analysis on the Exploit for CVE-2011-2110 Adobe Flash Player Vulnerability

02

Jul

2011

On June 14, Adobe released updates and a security bulletin (APSB11-18) referencing attacks affecting Adobe Flash Player (versions 10.3.181.23 and earlier). These attacks have been observed as hosted on webpages containing malformed SWF files. We spent some time analyzing this Flash Player vulnerability (described in CVE-2011-2110) and are providing some technical details of this in-the-wild […]

Category General Written by Microsoft Malware Protection Center 0 Comments

Win32/Alureon brings back old school virus techniques, enhanced

16

May

2011

In 1999, a new virus, Win32/Crypto, was discovered. It was using brute-force attacks against its encryption key to decrypt its body. Today, in 2011, variants of Win32/Alureon are bringing this old-school technique back to life, with some extra naughtiness, as you will see below. While working recently on different Win32/Alureon samples, we noticed some behaviour […]

Category General Written by Microsoft Malware Protection Center 0 Comments

The Latest in IT Security

Posts Tagged ‘memory region’

The Mystery of Duqu: Part Five

A Technical Analysis on the Exploit for CVE-2011-2110 Adobe Flash Player Vulnerability

Win32/Alureon brings back old school virus techniques, enhanced

Categories

Featured

Archives

Latest Comments

About Us

Contact Us