We will be using IDA Pro Freeware Version for this purpose. Note: Readers who haven't read the previous article, Reverse Engineering Hostile Code, may want to stop and do that now, unless they already have some knowledge of C and assembly language.Ī deadlisting is simply a dump of the assembly language code of the trojan. IDA Pro Freeware Version - Win32 disassembler (runs on Linux under Wine release 20021007, may run under other versions as well).gdb - our favorite Unix debugger and disassembly environment and,.Wine - the Win32 API implementation for Unix.As an added bonus, all the tools used in this article are either freeware or free software. At the same time, this article will discuss some techniques for reversing Windows-native code entirely under Linux. This article will offer a more detailed examination of the reversing process, using a trojan found in the wild. In my last article, Reverse Engineering Hostile Code, I described the tools and processes involved in basic reverse engineering of a simple trojan.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |