|
Over the years I have invested heavily in product R&D building a wide
assortment of new skills, and fostering a diverse background and understanding.
These are some of the papers I have developed along my journey that I make freely available to help others along. |
Sandsprite Papers
VB6 P-Code / Reversing
Scripting Arbitrary VB6 Apps
Recovery of VB6 prototypes
VB6 P-Code Disassembly
Writing a P-Code Debugger
VB6 P-Code Obfuscation
Binary Data Hiding in VB6
Binary Reuse of VB6 PCode
Parsing VB6 Form Controls
VB6 Variable Initilization
Reverse Engineering / Binary Analysis
Visual Basic 6
- Binary Data Hiding in VB6 Executables - Avast 2020
This paper details the various ways VB6 malware can embed binary data within an executable.
There are 4 main categories:- string based encodings
- data within program opcodes
- data within the vb6 file format
- data in/around normal PE structures
This paper has now been published on the Avast Decoded blog. (local copy)