Basic tips

Find mutex Windows
Download WinObj from https://docs.microsoft.com/en-us/sysinternals/downloads/winobj​
Unzip and run
Click menu File | Run as administrator
Click sessions in left hand navigation pane
Click on sub nodes until one displays BaseNamedObjects
Click on 'BaseNamedObjects'

Unpacking

Malware instrumentation with frida

Last modified 2yr ago