u/herrcorein r/ReverseEngineering • Recommends
Malware Samples Crashing x64dbg Fixed! (OALabs Tutorial)
52K subscribers • 40 videos on Hallway
Intermediate. Assumes working knowledge.
7.7K views7 years ago1 recommendation
SecurityTools and practiceDebuggingReverse engineering
This video explains why certain malware samples crashed older versions of x64dbg by exploiting PE file header parsing and how the fix works.
We dive into why some recent malware samples have been crashing in x64dbg. Expand for more... ----- OALABS DISCORD discord.gg/6h5Bh5AMDU OALABS PATREON patreon.com/oalabs OALABS TIP JAR ko-fi.com/oalabs OALABS GITHUB github.com/OALabs UNPACME - AUTOMATED MALWARE UNPACKING unpac.me/#/ ----- Example (Vidar) sent from subscriber packed with packer that crashes old versions of x64dbg : 7b2c480736bc2ea3c6e064077e78c6a0acabbd83d0e4e637673c9deb966296d5 Download x64dbg (with fix for crash): x64dbg.com/#start Donate to x64dbg: bountysource.com/teams/x64dbg Corkami PE file map: github.com/corkami/pics/tree/master/binary/pe102 MSDN PE file documentation: docs.microsoft.com/en-us/windows/desktop/debug/pe-format#exp… PE Bear download: github.com/hasherezade/pe-bear-releases/releases/tag/0.3.9.5 Feedback, questions, and suggestions are always welcome : ) Sergei twitter.com/herrcore Sean twitter.com/seanmw As always check out our tools, tutorials, and more content over at openanalysis.net #x64dbg #MalwareAnalysis #Tutorial #OpenAnalysisu/herrcorein r/ReverseEngineering • Recommends