Live Stream VOD: N00bs Night 1 - PowerShell Loader and Shellcode Markup (Patreon)

In this twitch stream we attempt our first ever N00bs Night where we cover simple reverse engineering topics with an aim to make the stream accessible to everyone! That being said... I'm not sure how well we succeeded 😅

The first half deals with extracting shell code from a PowerShell loader, and the second half we attempt to mark up some simple x86 shell code in IDA. Things get a bit spicy with the IDA types...

Samples

PowserShell code 

2eb435f69a445e4ca80fb0353d067dcd9d4b0dbf757978d46c27a5dd147a2ae8

Notes

PowerShell Loading Shellcode