Videos Tools Areas of Research WhitePapers Our Open Source Projects Blogs Contact Us 1960
Over the years I have invested heavily in product R&D building a wide assortment of new skills, and fostering a diverse background and understanding.

These are some of the papers I have developed along my journey that I make freely available to help others along.

Sandsprite Papers
VB6 P-Code / Reversing
Reverse Engineering / Binary Analysis
Visual Basic 6
  • Binary Data Hiding in VB6 Executables - Avast 2020

    This paper details the various ways VB6 malware can embed binary data within an executable.

    There are 4 main categories:
    • string based encodings
    • data within program opcodes
    • data within the vb6 file format
    • data in/around normal PE structures

    This paper has now been published on the Avast Decoded blog. (local copy)
© 2021