Posts Tagged ‘windows pe’

Virus Analyst (m/f)

Aug

2013

Virus Analyst (m/f) Posted: 18 August 2013 Company name: Avira Operations GmbH & Co. KG Location: Tettnang, Lake Constance Germany Travel: none Poster represents: employer Terms of employment: Salaried employee Hours: full time Onsite: yes Description:As a Virus Analyst (m/f) you are strengthening our international team to help us fighting against digital threats. Your ideas […]

Category General Written by Virus Bulletin - Jobs 0 Comments

Extracting Digital Signatures from Signed Malware, (Sat, May 11th)

May

2013

Sometimes attackers digitally sign their malicious software. Examining properties of the signature helps malware analysts understand the context of the incident. Moreover, analysts could use the signature as an indicator of compromise. Here are some tips and tools for determining whether a suspicious Windows executable has been signed and for extracting the embedded signature in […]

Category Security Written by SANS Internet Storm Center, InfoCON: green 0 Comments

GrooveMonitor: Another Wiper Copycat?

Dec

2012

Yesterday the Iranian CERT made an announcement about a new piece of wiper-like malware. We detect these files as Trojan.Win32.Maya.a. This is an extremely simplistic attack. In essence, the attacker wrote some BAT files and then used a BAT2EXE tool to turn them into Windows PE files. The author seems to have used (a variant […]

Category General Written by Securelist / Blog 0 Comments

The Latest in IT Security

Posts Tagged ‘windows pe’

Virus Analyst (m/f)

Extracting Digital Signatures from Signed Malware, (Sat, May 11th)

GrooveMonitor: Another Wiper Copycat?

Categories

Featured

Archives

Latest Comments

About Us

Contact Us