Exetools  

Go Back   Exetools > General > General Discussion

Notices

 
 
Thread Tools Display Modes
Prev Previous Post   Next Post Next
  #3  
Old 02-02-2015, 03:12
Stitch Stitch is offline
Friend
 
Join Date: Sep 2014
Posts: 32
Rept. Given: 1
Rept. Rcvd 3 Times in 3 Posts
Thanks Given: 4
Thanks Rcvd at 12 Times in 8 Posts
Stitch Reputation: 3
Quote:
Originally Posted by h8er View Post
I recommend you to read Practical Malware Analysis, it's a very good introduction to the subject
Thank you for the response. Is the assembly subject in the book is for beginners or I shouldn't start from there?
I have no problem start from there just want to read more opinions and thoughts.

Quote:
Originally Posted by Conquest View Post
IDA is a disassembler, not a antimalware product. Your question itself isnt invalid but the question is something like this "how can i make Apollo 11 with a hammer " .
Anyway , to be specific to your question - you have to make sure 1. you unpacked the file(if its packed) , 2. dont run the file by mistake (use a lab environment thats why) . Then figure out what it will do/does (Again running it in a sandboxed environment environment will yield your result much easier) . This is the basics . But each of the steps involve complexity . You can check different malware analysis sites on the net for examples
The question is clear, the reader isn't clear. I downloaded Detect It Easy but it doesn't show me anything suspicious, I asked this question because Ollydbg 1.10 gave me an error on opened in OS 8.1.
x64/32_dbg I have no idiea about it. Just wanted to check IDA and about running VMware I will do it later. I thought I can find my answer here.


Sorry if spammed or uncleared, just cannot find instructions at google. Thanks all for response and please don't junk.
Reply With Quote
 


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Question on PKE TmC General Discussion 8 09-19-2007 23:59
VS 6 question(s)... newguy General Discussion 9 04-22-2004 19:49
Question to JMI Rhodium General Discussion 1 02-20-2004 06:16


All times are GMT +8. The time now is 16:26.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )