Rootkit Agent.adah Anatomy and Executables Carving via Cryptoanalytical Approach

http://evilcodecave.blogspot.com/2010/01/rootkit-agentadah-anatomy-and.html

Advertisements

This entry was posted on Saturday, January 30th, 2010 at 10:30 am and is filed under Cryptanalysis, Reverse Code Engineering. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.

One Response to Rootkit Agent.adah Anatomy and Executables Carving via Cryptoanalytical Approach

  1. K2 says:
    February 4, 2010 at 11:22 am

    Nice write up, I was wondering if you were able to get good results with using, perhaps, block based 64 byte slide’s instead of single byte 😉

    Reply

Leave a Reply

Fill in your details below or click an icon to log in:

Gravatar
WordPress.com Logo

You are commenting using your WordPress.com account. ( Log Out /  Change )

Google photo

You are commenting using your Google account. ( Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. ( Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. ( Log Out /  Change )

Cancel

Connecting to %s

%d bloggers like this: