Malware Analysis Bootcamp - File Type Identification

[@m1k3thirteen81]

You are the David Attenborough of Cybersecurity! Can’t get enough! Thank you so much for what you do for the community!

[@HackerSploit]

That is greatly appreciated, I am glad you find value in the content.

[@Naveenbabuborugadda]

This is the ratest video about Malware Analysis in UA-cam

[@eswar5252]

Thanks You saved me a lot of time and drew me out of confusion of what to learn

[@ABDULKARIMHOMAIDI]

Thanks man you deserve support

[@sametsahin-eh3qj]

You sir are a genius. Huge respect.

[@cherubrock222]

Amazing series! You have a great way of explaining this stuff.

[@christojojo6590]

Hi, if the cff explorer can find all the info about the file type, then what is the need for all other tools explained in the video(Hexeditor,exeinfo PE)

[@VipulVaibhaw]

Watched it over minutely... thanks for this. :)

[@95Biswajit]

Loved it. :).. looking forward to get more in this series.

[@blade1551431]

link for sample does not work for me

[@KishorKumar-re2rs]

Can you please explain what is the entry point and what are its uses?

[@nitczi706]

I'm trying to download the Pestudio manually, but when i run it, it says "The version of this file is not compatible with the version of Windows you're running. Check your computer's system information to see whether you need an x86 (32-bit) or x64 (64-bit) version of the program, and then contact the software publisher."
I tried to find another version to download but I have no success. What can i do? There's another program which could replace the PEstudio?

[@puneetkulkarni2416]

Hello Hackersploit!!! You think I should refer to the book Malware Analysis by Monappa KA?
Which one did you refer?

[@Wei-ji9ou]

Can malware activate without execute them ?

[@Chris-ez1ly]

Great video. Thank you as always.

[@austinmurphy9074]

doesn't host-only adapter allow guest to communicate with host? How is this safe?

[@pavanteja2219]

The sample malware not PE right ?

[@_nosma]

Cannot Download the sample, it gives me a 404 error page.

[@nikhilt3755]

"this program cannot be run in DOS"
this is located inside DOS stub
if you are running on DOS this header is identified and gets executed
else its skips this header
last 16 bits in MZ header tells the address to the PE header
(because DOS header gets skipped in windows 10)
my old memories with malware analysis

[@HackerSploit]

Yes, we have not yet covered headers yet. This will also be explained.

[@nikhilt3755]

@@HackerSploit ok bro
i m just saying what i remembered
its been long while i have learnt
waiting for whole tuts

[@supratickdey7125]

then how to find file type for packed ones

[@theunforgiven2601]

why it doesn't work for me?
it keeps telling me that it cant open the file because if may contain viruses.
when ever i drag the malware to the hex editor or any other program.
please help x(
note that it was working before, and all of sudden it didn't work again x( x(

[@theunforgiven2601]

@Nathan Jenkins i did.. but still the malware didn't open.
However, i used linux. And it's working :p

[@qwerty.760]

@@theunforgiven2601 also dont run it on your main system. Use virtual box/vmware or another isolated system.

[@theunforgiven2601]

@@qwerty.760 Yep... thank you for the advice. i used VM for that :)

[@bobnoob1467]

@@theunforgiven2601 even better, a sandbox environement.

[@timoteogarcia1581]

What does MZ stand for?

[@cyberi2009]

what about Hebrew in the thanks part

[@hanial-hayyawi4578]

Splendid video

[@SatyamKumar-ti6hw]

The malware sample is no longer located in the Google drive. Error 404

[@HackerSploit]

The issue should be resolved.

[@dylanzentz4525]

where can i go to find malware? i just want the source code of viruses. Where can i find them?

[@ProfChoy]

Have you found them? I think GitHub has it

[@choudhary6964]

Is it cryptography?

[@ecliptic_at]

great video

[@amoghnath3330]

Thanks waiting for this :)

[@visionofsalvation]

Thank you.

[@rayamoooooo685]

thanks

[@MayankBhardwaj-fy7ge]

😍😍😍😍😍😍

[@B14CK.M4M84]

❤❤👍👍

[@MisterK-YT]

Windows Vista? Lol