[TIP] DLL Analysis with Cuckoo Sandbox

1) DLL (dynamic-link library)
2) Exported fucntion
3) How to call exported function?
  • DllMain
  • DLLRegisterServer
  • ServiceMain
  • Export Name
4) How do analysis DLL in cuckoo?
  • dll.py
  • Default option
    • DllMain
  • Check Export name in DLL
    • Export Name
References
Copyright 2018. (JAEKI KIM) all rights reserved.
Copyright 2018. (JAEKI KIM) All pictures cannot be copied without permission.




comments powered by Disqus