patreon
In this tutorial we demonstrate how to debug a DLL export (ordinal) with x64dbg. The sample is an unpacked SquirrelWaffle payload which we debug to dynamically extract the config.
Sample:
https://malshare.com/sample.php?action=detail&hash=6095f96dd5eca96a3fb9338eec4ab574921c0febb36f6a6db60aae1aeb9ffcab
tyviania
lj74nz
rootlancer
ιΉΏιε°Ύγ§γγ/δΈε²γ§γ
PsychospacecowCosmicDairyPrairie
Windyote
Flormoo
NCBELLY
Blumineck
crackermilk
Fetishhand
Wossa
hiropaint
owlskull
LittleNapoleon
EonA
PyroPike
Jestami
RIMINGs
arya
sajimaririri
nnilaee
Curt C. Smith
BaKaiju's Lair
Meguhime
Niflheim's abode
rubisama
amachiro
Gimo_Chen
γγγ«η°δΈ
enei
sexhot
pokilewd
ff00ffmagenta
tomia
denkimiso
Long Live Ruby
Wanax
The Manor JOI
SINEWAVEKID