Canberra

Details

When Friday 22nd August 2014
Where CSIT Seminar Room, N101, CSIT Building, Building (108), North Road, ANU
Time 6:00 PM
After Talks Uni Pub, 17 London Circuit
Organisers Silvio Cesare, Andrew Muller, Brian Candlish
Contact canberra@ruxmon.com
Save Event

Notification List

Please sign up to our email notification list for advanced notification of planned Ruxmon events and presentation details.

Location


Presentations

Automated Unpacking: A Behaviour Based Approach - Karl

Level: Intermediate

Malware often contains encrypted/packed code to make it harder to analyse.

I will be presenting the initial version of a script which uses dynamic analysis to automatically detect malware unpacking/decrypting
itself, attempt to find the original entry point and the unpacking loop, and to dump the unpacked memory to disk.

Bio

I've had an interest in viruses and malware since seeing a college computer display 'Your PC is now stoned' -- naturally I had to figure out what was going on. Then I met Michelangelo, ByteBandit, and ByteWarrior.

I have been working in I.T. for 19 years. I'm now trying to catch up with what malware has been doing in all those years while I've been doing admin jobs, ops jobs, troubleshooting, fixing, and breaking things.


Archive

When Title Speaker Materials

Friday 22nd August 2014

Automated Unpacking: A Behaviour Based Approach

Karl

Not available

Friday 22nd August 2014

Not available

Friday 18th July 2014

Analysing Pager Messages for Fun and Profit

Faz

Not available

Friday 18th July 2014

Not available

Friday 20th June 2014

Cgilua vuln

James Mouat

Not available

Friday 20th June 2014

The Modern Response: Hacker vs Defender

George Stewart

Not available

Friday 16th May 2014

Welcome To My PhD

Paul Black

Not available

Friday 16th May 2014

Incident Response with CrashCart

Frank Bruzzaniti

Not available

Thursday 17th April 2014

A Decade of Building Security In

Jacob West

Not available

Thursday 17th April 2014

Breaking the Security of Physical Devices

Silvio Cesare

Not available

Supported By