oalabs
patreon
Live Stream VOD: Rhadamanthys Part 3 - Stage 3 API Resolving
🕑 Added 2023-01-30 19:56:59 +0000 UTCIn this twitch stream we take a look at Stage 3 of Rhadamanthys. This is the final stage of the loader. This stage is also position independent shell code and we spend the entirety of the stream marking up relative offsets and resolving APIs to make the code readable in IDA.
Samples
Packed Parent
dca16a0e7bdc4968f1988c2d38db133a0e742edf702c923b4f4a3c2f3bdaacf5
Unpacked Stage 3 Dump
ee3fe7d514c1c8612015a0a9b6a4b504c2bedbd7050b401636f8c0eaef4ac0b3
Notes
Rhadamanthys Rename IAT Hashes
