HowTo: Extract “Hidden” API-Hooking BHO DLLs
by Volatility | Jan 23, 2013 | code injection, malware, unpacking, volatility, windows
A Twitter user recently asked a question to the @volatility account: “can you please tell me how to extract SilentBanker [from memory]”? We like to encourage people to work through problems on their own, so our initial advice was short and sweet:...Unpacking Dexter POS “Memory Dump Parsing” Malware
by Volatility | Dec 12, 2012 | malware, unpacking, volatility, windows
I’m a big fan of Dexter. As I recently mentioned during an impromptu discussion with our first group of memory analysis training attendees, if there are only a few minutes left in an episode and he hasn’t killed anyone yet, I start getting nervous. So when...
You must be logged in to post a comment.