More .NET malware analysis. In this post, we'll be analyzing another spearphishing email, this time masquerading as a mathematics paper exploiting CVE-2017-11882. And we'll generate some Yara rules for detecting it.
-
I’m currently working on a project that involves sending alerts and notifications to users on Windows 11 systems. During development, I le... -
It seems like a lot of the previous software wrappers to interact with archive.today (and archive.is, archive.ph, etc) via the command-line ...
-
Most code on Windows runs in user-space. This means that, when we first run a program, it needs to perform some rituals to successfully call...