Learn how to write code based signatures. Become proficient in detecting malware samples that have no plain text strings.
Jump to 37:06 for summary of tips.
Malware analysis courses: https://malwareanalysis-for-hedgehogs...
sample: https://www.unpac.me/results/3c111dab...
coderex: https://github.com/intel471/coderex
yara: https://github.com/virustotal/yara/re...
unpac.me: https://www.unpac.me/
notepad++ syntax highlight: https://github.com/struppigel/NPP-Yar...
Buy me a coffee: https://ko-fi.com/struppigel
Follow me on Twitter: / struppigel
00:00 Intro
00:47 PrivateLoader markup of target pattern
07:19 First signature version
17:13 Testing the signature on unpac.me
21:52 Correcting the signature
37:06 Tips summary
#yara #code #privateloader #malware #malwareanalysis #reverseengineering