Visit site 0xc0decafe.com

the - 13
malware - 8
api - 6
and - 6
with - 5
analysis - 5
can - 5
header - 5
timestamps - 5
about - 4
hashing - 4
thomas - 4
barabosch - 4
this - 4
2021 - 3
obfuscation - 3
there - 3
that - 3
continue - 3
reading - 3
for - 3
from - 2
l0w - 2
h1gh - 2
level - 2
full - 2
stack - 2
cyber - 2
navigation - 2
menu - 2
its - 2
technique - 2
they - 2
are - 2
january - 2
fix - 2
magic - 2
numbers - 2
portable - 2
executable - 2
memory - 2
ease - 2
all - 2
more - 2
possible - 2
compilation - 2
even - 2
threat - 2
actor - 2
posts - 2
0xc0decafe - 1
com - 1
main - 1
home - 1
close - 1
open - 1
march - 1
detect - 1
yara - 1
utilizes - 1
complicate - 1
one - 1
targets - 1
specifically - 1
static - 1
nutshell - 1
uses - 1
hashes - 1
names - 1
0x0688eae1 - 1
instead - 1
plain - 1
strings - 1
kernel32 - 1
sleep - 1
obfuscate - 1
functionality - 1
relies - 1
typically - 1
pretty - 1
nasty - 1
since - 1
requires - 1
analysts - 1
resolve - 1
before - 1
conduct - 1
meaningful - 1
many - 1
advanced - 1
families - 1
utilize - 1
including - 1
buer - 1
poisonivy - 1
plugx - 1
urlzone - 1
learn - 1
how - 1
malduck - 1
often - 1
corrupts - 1
hinder - 1
overwriting - 1
parts - 1
evades - 1
simple - 1
dumpers - 1
thwarts - 1
proper - 1
loading - 1
tools - 1
lucky - 1
then - 1
only - 1
overwrites - 1
leaves - 1
rest - 1
intact - 1
such - 1
corrupted - 1
headers - 1
need - 1
little - 1
bit - 1
knowledge - 1
format - 1
right - 1
tool - 1
manipulate - 1
dumps - 1
analyst - 1
guide - 1
blog - 1
post - 1
time - 1
exactly - 1
found - 1
files - 1
describe - 1
date - 1
these - 1
may - 1
reveal - 1
details - 1
instance - 1
deduce - 1
working - 1
hours - 1
use - 1
information - 1
hopefully - 1
together - 1
other - 1
artifacts - 1
attribution - 1
purposes - 1
but - 1
aware - 1
though - 1
valuable - 1
forensic - 1
artifact - 1
forged - 1
while - 1
coff - 1
field - 1
timedatestamp - 1
most - 1
known - 1
place - 1
look - 1
timestamp - 1
places - 1
where - 1
find - 1
file - 1
page - 1
older - 1
twitter - 1
github - 1
2022 - 1
back - 1
top - 1