Книга: Practical Malware Analysis: The Hands-On Guide to Dissecting Malicious Software
Назад: 19. Shellcode Analysis
Дальше: Position-Independent Code

) to load and jump to pieces of shellcode.

As discussed in , loading shellcode into IDA Pro for static analysis is relatively simple, but the user must provide input during the load process, since there is no executable file format that describes the contents of shellcode. First, you must ensure the correct processor type is selected in the load process dialog. For samples in this chapter, you can use the Intel 80x86 processors: metapc processor type and select 32-bit disassembly when prompted. IDA Pro loads the binary but performs no automatic analysis (analysis must be done manually).

sss
sss

© RuTLib.com 2015-2018