Click here to download all references as Bib-File.•
| 2026-10-07
⋅
cocomelonc
⋅
Malware development trick 67: Run shellcode via CreateThreadpoolWait. C and assembly examples |
| 2026-09-23
⋅
cocomelonc
⋅
Malware analysis: part 12. Section entropy from scratch in pure C: a tiny packed/encrypted detector |
| 2026-09-15
⋅
cocomelonc
⋅
MacOS malware persistence 13: man.conf. Simple C example |
| 2026-09-05
⋅
cocomelonc
⋅
Malware development trick 66: TLS callbacks before main. Simple C example |
| 2026-08-25
⋅
cocomelonc
⋅
Malware development trick 64: PE file bloating and overlay data. Simple C example |
| 2026-08-24
⋅
cocomelonc
⋅
Malware development trick 63: modifying PE version metadata and icon. Simple C example |
| 2026-08-21
⋅
cocomelonc
⋅
Malware shellcode delivery via signal - part 5. Physics-guided AI demodulator. PyTorch example |
| 2026-08-01
⋅
cocomelonc
⋅
Malware shellcode delivery via signal - part 4. Embedding Bell 202 FSK into MP3 and recovering the symbol clock. Python and C example |
| 2026-07-29
⋅
cocomelonc
⋅
Malware development trick 61: Module stomping. Simple C example |
| 2026-07-25
⋅
cocomelonc
⋅
Malware analysis: part 11. How to create your own mini-GPT for binary analysis |
| 2026-07-16
⋅
cocomelonc
⋅
Malware development trick 60: Function stomping (remote process). Simple C example |
| 2026-06-29
⋅
cocomelonc
⋅
Malware analysis: part 10. Practical PE parsing. Simple python examples |
| 2026-06-28
⋅
cocomelonc
⋅
Malware development trick 59: Function stomping (current process). Simple C example |
| 2026-06-23
⋅
cocomelonc
⋅
MacOS malware persistence 12: Folder Actions. Simple AppleScript and C example OSAMiner XCSSET |
| 2026-06-21
⋅
cocomelonc
⋅
Malware analysis: part 9. AI-assisted deobfuscation: control flow flattening. Simple C example. |
| 2026-06-17
⋅
cocomelonc
⋅
Linux hacking part 11: GOT/PLT hijacking. Simple C example |
| 2026-05-24
⋅
cocomelonc
⋅
Malware shellcode delivery via signal - part 1. FSK Basics. Simple python script |
| 2026-04-27
⋅
cocomelonc
⋅
MacOS malware persistence 11: osascript LOLBin. Simple C example OSAMiner |
| 2026-04-23
⋅
cocomelonc
⋅
MacOS malware persistence 10: caffeinate LOLBin. Simple C example |
| 2026-04-12
⋅
cocomelonc
⋅
Mobile malware development trick 3. CPU info logger: anti-VM and anti-sandbox. Simple Android (Kotlin) example. |