Palo Alto Networks

IDAPython

Palo Alto Networks News of the Week – June 11

Take a moment and catch up on all of our top news from this past week.

In part six of this series, Unit 42’s Josh Grunzweig looks at the power of IDAPython and command-line switches to save time and make your life as a re...

Events

News of the Week

Jun 11, 2016

By Anna Lough

Palo Alto Networks

Products and Services

Partners

Unit 42

Using IDAPython to Make Your Life Easier: Part 6

In Part 5 of our IDAPython blog series, we used IDAPython to extract embedded executables from malicious samples. For this sixth installment, I’d like to discuss using IDA in a very automated way. Specifically,...

Jun 09, 2016

By Josh Grunzweig

Malware, Unit 42

Click-Fraud Ramdo Malware Family Continues to Plague Users

Be the first to receive the latest news, cyber threat intelligence and research from Unit 42. Subscribe Now.

Apr 11, 2016

By Josh Grunzweig

Malware, Threat Prevention, Unit 42

New Attacks Linked to C0d0so0 Group

While recently researching unknown malware and attack campaigns using the AutoFocus threat intelligence platform, Unit 42 discovered new activity that appears related to an adversary group previously called “C0d0so0” or “Codoso”. This group...

Jan 22, 2016

By Josh Grunzweig and Bryan Lee

Events, News of the Week

Palo Alto Networks News of the Week – January 16

It’s been a busy week for Unit 42, our threat intelligence team. Learn more about what they found after they took a closer look at recent holiday season-themed attacks. They also found over 90,000 websites comp...

Jan 16, 2016

By Anna Lough

Unit 42

Using IDAPython to Make Your Life Easier: Part 5

We continue our series on using IDAPython to make things easier for reverse-engineers by tackling a problem malware analysts deal with on an almost daily basis: extracting embedded executables. Malware will oft...

Jan 14, 2016

By Josh Grunzweig

Events, News of the Week

Palo Alto Networks News of the Week – January 9

Josh Grunzweig from the Unit 42 threat intelligence team finished his series on how to use IDAPython to make your life easier. (Check out part 1, part 2, and part 3.)

Jan 09, 2016

By Anna Lough

Threat Prevention, Unit 42

Using IDAPython to Make Your Life Easier: Part 4

Earlier installments of this series (Part 1, Part 2 and Part 3) have examined how to use IDAPython to make life easier. Now let’s look at how reverse engineers can use the colors and the powerful scripting feat...

Jan 06, 2016

By Josh Grunzweig

Unit 42

Using IDAPython to Make Your Life Easier: Part 3

In the first two posts of this series (Part 1 and Part 2), we discussed using IDAPython to make your life as a reverse engineer easier. Now let’s look at conditional breakpoints.

Jan 04, 2016

By Josh Grunzweig

Unit 42

Using IDAPython to Make Your Life Easier: Part 2

Continuing our theme of using IDAPython to make your life as a reverse engineer easier, I’m going to tackle a very common issue: shellcode and malware that uses a hashing algorithm to obfuscate loaded functions...

Dec 30, 2015

By Josh Grunzweig

Unit 42

Using IDAPython to Make Your Life Easier: Part 1

As a malware reverse engineer, I often find myself using IDA Pro in my day-to-day activities. It should come as no surprise, seeing as IDA Pro is the industry standard (although alternatives such as radare2 and...

Dec 29, 2015

By Josh Grunzweig

Load more blogs