Home Artists Posts Import Register
Patreon importer is back online! Tell your friends ✅

Content

In this twitch stream we take a look at Stage 2 of Rhadamanthys and use Dumpulator to create a simple unpacker. 

We spend the first hour marking up the Stage 2 shell code, the emulation work starts at the 1h 13min mark. 

Samples

Packed Parent

dca16a0e7bdc4968f1988c2d38db133a0e742edf702c923b4f4a3c2f3bdaacf5 

Dumped Stage 2

d4f37699c4b283418d1c73416436826e95858cf07f3c29e6af76e91db98e0fc0 

Notes

Rhadamanthys Emulation Attempt 

Files

Live Stream VOD: Rhadamanthys Part 2 - Emulating Shellcode

This is "Live Stream VOD: Rhadamanthys Part 2 - Emulating Shellcode" by OALABS on Vimeo, the home for high quality videos and the people who love them.

Comments

justin thattil

Plugin worked on IDA for OSX as expected :)

m4n0w4r

Hell .. very nice pseudo-code of sc stage2. Thanks Mishap!!