Reverse EngineeringMalware

pe-viewer—C:\Samples\mzheader reverse engineering / malware

.text:0000 ; Liam Chugg — Security Researcher @ CrowdStrike

.text:0004 ; I enjoy picking apart malware, everything here is reproducible if you want to follow along

.text:0008 ; Samples: VirusTotal · MalwareBazaar · github.com/MZHeader/samples

.text:000C ; → more about me ▼

.text:0010 ; ────────────────────────────────────────────────────────

.text:0014 ; Hey! I'm Liam, a Security Researcher at CrowdStrike. I originally started this blog while working as a security analyst, mainly as a way to get into reverse engineering by sharpening my skills and developing my technical writing ability. Over time it's grown into a place where I share things I find interesting, from CTF / CrackMe challenges to deep dives on random malware samples.

.text:0030 ; ────────────────────────────────────────────────────────

Section[1] .rsrc VirtualAddress: 0x00004000 VirtualSize: 0x00001200 Characteristics: 0x40000040

; filter:

Section[2] .idata VirtualAddress: 0x00006000 VirtualSize: 0x00000600 Characteristics: 0x40000040

.idata:0000 linkedin.com/in/liam-chugg .idata:0020 github.com/MZHeader .idata:0040 x.com/Chuggx00

; hover a .rsrc entry
; to inspect resource data