Malware Analysis - Writing x64dbg unpacking scripts
x64dbg has its own scripting language. We will unpack a 4-stage malware and write an x64dbg unpacking script for it.
sample: https://malshare.com/sample.php?actio...
This is a ZIP archive, use the password "infected" to unpack.
x64dbg script documentation: https://help.x64dbg.com/en/latest/com...
unpacking script: https://gist.github.com/struppigel/3b...
Malware analysis courses: https://malwareanalysis-for-hedgehogs...
Buy me a coffee: https://ko-fi.com/struppigel
Follow me on Twitter: / struppigel
00:00 Intro
01:04 Overview 4 unpacking stages
03:00 mal_unpack - .NET stages 1 and 2
06:13 Unpacking native stage 3
14:33 Unpacking native stage 4
#x64dbg #unpacking #malware #malwareanalysis #reverseengineering