Archive

Archive for June 5th, 2008

One more reminder – BayouSec is tonight!!!

June 5th, 2008 Michael Farnum

It is at the Alert Logic facilities @ 1776 Yorktown, 7th floor, just south of the Marathon Oil tower on San Felipe.  It will start at around 6:30pm.

Below is the information on the talk and the speaker.  I expect the talk to last about 25 minutes, and then it will be open to questions and comments.  We can just let it grow from there. 

Thanks to Adam Pridgen for volunteering for this.  In the future, if you have something you want to speak on, please let me know.

Michael Farnum

—————————-

Speaker:

Adam Pridgen

Title:

Reverse Engineering Software with Basic Protections

Summary:

The presentation will cover the basics of reverse engineering malware or any other software protected with basic protectors and packers using ImmDbg, IDA Pro, LordPE, ImpRefound, Wireshark, and an IRC server.  The presentation will walk through dumping the malware to disk, and then cover the general process I used to identify the command structure, functionality, and required parameters to interact with the malware sample.
Bio:
Adam Pridgen is an independent security researcher and contractor.  Previously, he worked for Foundstone Professional Services where he was involved with code reviews, threat models, penetration testing, among other tasks such as teaching and lab development for the Foundstone’s Ultimate Hacking classes.  Prior to Foundstone, he spent a little over five years in the security community working on software development projects, software testing, and in telecommunications for a variety of organizations.  Adam’s most notable accomplishments include an MS and BS in Electrical and Computer Engineering and an Honorable Discharge from the US Army.

—————————-

Categories: Security