Writing a libemu/Unicorn Compatability Layer
April 17 2017In this post we are going to take a quick look at what it takes to write a libemu compatibility layer for the Unicorn engine. In the ...
Read moreWriting a libemu/Unicorn Compatability Layer
April 17 2017In this post we are going to take a quick look at what it takes to write a libemu compatibility layer for the Unicorn engine. In the ...
Read moreWriting a libemu/Unicorn Compatability Layer
April 17 2017In this post we are going to take a quick look at what it takes to write a libemu compatibility layer for the Unicorn engine. In the ...
Read moreWriting a libemu/Unicorn Compatability Layer
April 17 2017In this post we are going to take a quick look at what it takes to write a libemu compatibility layer for the Unicorn engine. In the ...
Read moreFLARE Script Series: Querying Dynamic State using the FireEye Labs Query-Oriented Debugger (flare-qdb)
January 4 2017Introduction This post continues the FireEye Labs Advanced Reverse Engineering (FLARE) script series. Here, we introduce flare-qdb, a command-line utility and Python module based on vivisect for...
Read moreFLARE Script Series: Querying Dynamic State using the FireEye Labs Query-Oriented Debugger (flare-qdb)
January 4 2017Introduction This post continues the FireEye Labs Advanced Reverse Engineering (FLARE) script series. Here, we introduce flare-qdb, a command-line utility and Python module based on vivisect for...
Read moreFLARE Script Series: Querying Dynamic State using the FireEye Labs Query-Oriented Debugger (flare-qdb)
January 4 2017Introduction This post continues the FireEye Labs Advanced Reverse Engineering (FLARE) script series. Here, we introduce flare-qdb, a command-line utility and Python module based on vivisect for...
Read moreFLARE Script Series: Querying Dynamic State using the FireEye Labs Query-Oriented Debugger (flare-qdb)
January 4 2017Introduction This post continues the FireEye Labs Advanced Reverse Engineering (FLARE) script series. Here, we introduce flare-qdb, a command-line utility and Python module based on vivisect for...
Read moreDeobfuscating Python Bytecode
May 3 2016Introduction During an investigation, the FLARE team came across an interesting Python malware sample (MD5: 61a9f80612d3f7566db5bdf37bbf22cf ) that is packaged using py2exe. Py2exe is a...
Read moreFLARE Script Series: flare-dbg Plug-ins
February 9 2016Introduction This post continues the FireEye Labs Advanced Reverse Engineering (FLARE) script series. In this post, we continue to discuss the flare-dbg project. If you haven’t...
Read more
Recent Comments