obfuscated code | DataProtectionCenter.com

Malware packer integrates with UPX

28

Jun

2011

Recently while I was analyzing a bunch of samples packed by custom packers, one of them struck me as a bit different than any others I saw before. At first glance, the outer layer of packing is a UPX stub, which is commonly used in malware. Especially when combined with a custom packer, UPX can […]

Category General Written by Microsoft Malware Protection Center 0 Comments

Incognito exploit kit

15

Jun

2011

Exploit kits are becoming an increasingly popular means of spreading attacks. Umesh recently blogged about seeing a spike in the usage of the Blackhole exploit kit. This exploit kit targets multiple known vulnerabilities present in a victim’s browser, increasing the probability of a successful compromise. Various exploit kits differ in the way they are packaged, […]

Category Security Written by Zscaler Research 0 Comments

An ant-hill full of bots

15

Jun

2011

I found a malicious page placed on a hacked server: CRA stands for Canada Revenue Agency, as you can see in the page’s source code below: The meta tag redirects to the Canada Revenue Agency’s website after a few seconds: But what is the rest of the obfuscated code? Here is the deobfuscated version (courtesy […]

Category Security Written by admin 0 Comments

The Latest in IT Security

Posts Tagged ‘obfuscated code’

Malware packer integrates with UPX

Incognito exploit kit

An ant-hill full of bots

Categories

Featured

Archives

Latest Comments

About Us

Contact Us