Skip to content

Commit 641b006

Browse files
committed
Initial commit
1 parent cc1e2bc commit 641b006

18 files changed

Lines changed: 1881 additions & 0 deletions

Sample/ASPack/honey_blue.exe

46.5 KB
Binary file not shown.

Sample/ASPack/honey_wcry.exe

1.31 MB
Binary file not shown.

Sample/ASPack/honey_zombie.exe

46.5 KB
Binary file not shown.

Sample/FSG/Lab18-02.exe

4.64 KB
Binary file not shown.
20 KB
Binary file not shown.

Sample/README

Lines changed: 24 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,24 @@
1+
UPX:
2+
Lab18-01.exe uses a slightly modified version of UPX.
3+
Section names changed: instead of UPX0 and UPX1, .text and UPX2 are used. For this reason UPX -d fails, but
4+
un{i}packer can still unpack it.
5+
This is a malware sample from the exercises of the book "Practical Malware Analysis".
6+
7+
upx_wcry_honey.exe is a WannaCry sample collected with our own honeypot and packed by ourselves.
8+
Caution: this is a really big file compared to the others, so it will take ages to unpack
9+
10+
honey_upx_blue.exe is a blouiroet sample obtained by our honeypot
11+
honey_upx_zombie.exe is a ZombieBoy sample
12+
13+
PEtite:
14+
UnPackMe_Petite1.4.exe is an unpacking challenge we found on tuts4you.com. It includes the ElDorado malware
15+
and also displays some messages, depending on whether it was unpacked successfully or not. After unpacking, a
16+
congratulations string is visible in the dump
17+
18+
FSG:
19+
Lab18-02.exe is another sample from "Practical Malware Analysis", this time packed with the "fast simple good" packer
20+
21+
ASPack:
22+
honey_blue.exe is blouiroet
23+
honey_zombie.exe is ZombieBoy
24+
honey_wcry.exe is WannaCry. Caution again: the WannaCry sample will also take very long here

Sample/UPX/Lab18-01.exe

13.5 KB
Binary file not shown.

Sample/UPX/honey_upx_blue.exe

40.5 KB
Binary file not shown.

Sample/UPX/honey_upx_zombie.exe

40.5 KB
Binary file not shown.

Sample/UPX/upx_wcry_honey.exe

2.22 MB
Binary file not shown.

0 commit comments

Comments
 (0)