Name: IDA PRO
Author: Hex-Rays

Help Desk

Web and Video Conferencing

Customer Support

Business Intelligence (BI)

Collaboration

Data Discovery and Visualization

Document Management

Enterprise Generative AI

File Sharing

Objectives and Key Results (OKR)

VoIP

Enterprise

Accounting

Online Trading

Payment Orchestration

Trust Management

Finance and Accounting

Applicant Tracking

Corporate Learning Management

Corporate Volunteering

Course Authoring

Employee Engagement

Employee Performance Management

HR Management

Payroll

Recruitment Agency

Talent Intelligence

Talent Management

Workforce Analytics

Workforce Management

Human Resources

Cloud Migration

Cloud Storage

Database DevOps

Database Management

Enterprise Backup

Fraud Detection

Hadoop-Related

High Availability Cluster

IT Service Management (ITSM)

Incident Response

Integrated Development Environment (IDE)

Integration Platform as a Service (iPaaS)

Network Performance Monitoring

Network Virtualization

Remote Monitoring and Management

Traffic Switching

Information Technology

A/B Testing

Ad Serving & Retargeting

All-in-One Marketing

Competitive Intelligence

Consumer Ratings & Reviews

Content Management

Cross-Channel Campaign Management

Email Marketing

Local Listing Management

Marketing Automation

Presentation

SMS Marketing

Social Media Advertising

Social Media Management

Survey & Forms Building

Web Analytics

Wholesale Marketplace

Marketing

Field Service Management

Professional Services Automation

Project Management

Professional Services

Conversation Intelligence

Customer Relationship Management (CRM)

Lead Generation Services

Sales Gamification

Sales

Cloud Access Security Brokers

Video Surveillance

Security

Digital Forensics

Estate Planning

Home Health Care

Insurance Claims Management

Military and Defense

Vertical-Specific

Find top rated software and services based on in-depth reviews from verified users. 400+ software categories including PaaS, NoSQL, BI, HR, and more.

MLReef

StorySlab

Marsview

Marsview.ai Inc.

Joyfill

CUX.io

cux.io

MyDash

ReferenceEdge

Point of Reference

Verint Workforce Management for Back Office

Verint

Timesheet Portal

Anfold Software Timesheet Portal

iGradePlus

Detectify is an automated External Attack Surface Management solution from the company of the same name in Stockholm, powered by an ethical hacker community. By leveraging hacker insights, security teams using Detectify can map out their attack surface to find anomalies and detect the latest business critical vulnerabilities,  especially in third-party software.

Deep Scan

Asset Monitoring

Detectify

CAST headquartered in New York offers Highlight, an application portfolio management solution providing software component analysis , application security, application benchmarking, and technical due diligence.

Complete

Cloud

CAST Highlight

IDA PRO

Software Composition Analysis Tools scan open-source code software to inventory all open-source components. They then enable companies to eliminate vulnerabilities and compatibility issues with open-source licenses like GPL.

Software Composition Analysis (SCA)

Open Analysis Live! A few tips and tricks to help you analyze malware with IDA Pro.

-----
OALABS DISCORD
https://discord.gg/6h5Bh5AMDU

OALABS PATREON
https://www.patreon.com/oalabs

OALABS TIP JAR
https://ko-fi.com/oalabs

OALABS GITHUB
https://github.com/OALabs

UNPACME - AUTOMATED MALWARE UNPACKING
https://www.unpac.me/#/

-----

Automated Malware Unpacking
https://www.unpac.me/

PE Mapped Virtual Address vs. Offset In Binary File: 02:55
IDA Pro Layout Tips: 05:10
Dynamically Resolving APIs: 08:10
IDA Pro Remote Debugger Setup and Use: 09:06
Walking Call Chain From Hooked API Back To Malware: 22:59
Using Memory Snapshots To Unpack Malware (Quick Unpacking): 40:07
Win32 API Calls and The Stack (How To Change Arguments On The Fly): 46:28
IDA Pro Remote Debugger (Debugging a DLL): 01:16:32


PE basics including how a PE is mapped in memory: 
http://www.delphibasics.info/home/delphibasicsarticles/anin-depthlookintothewin32portableexecutablefileformat-part1

http://www.delphibasics.info/home/delphibasicsarticles/anin-depthlookintothewin32portableexecutablefileformat-part2

Link to the most excellent IDA Pro book:
https://www.nostarch.com/idapro2.htm

Microsoft calling conventions:
https://msdn.microsoft.com/en-us/library/k2b2ssfy.aspx

RegTestUPX1.exe (benign demo application, safe to run):
https://www.virustotal.com/en/file/31e8a11960d0492b64241354c567643f09f0e0278658d31e75d6f2362dbfae44/analysis/1486886366/

final_unmapped.dll (DLL demo **WARNING REAL MALWARE ONLY RUN IN A VM)
https://www.virustotal.com/en/file/275f927f5cc809ebba57c6e766c550d2d27b1841708459a876c6f5a99201ecb6/analysis/

We are always looking for feedback, what did you like, what do you want to see more of, what do you want to see us analyze next? Let us know on twitter:
https://twitter.com/herrcore
https://twitter.com/seanmw

As always check out our tools, tutorials, and more content over at http://www.openanalysis.net

#IDAPro #ReverseEngineering #MalwareAnalysis

IDA Pro Malware Analysis Tips

IDA Pro 6.6 Demo

Demo Hexrays Python in IDA Pro 6.1 & Python 27

This lecture picks up where Wk07.1 left off doing static analysis. (Unfortunately, Wk07.1 video got corrupted, so need to re-record it).

In this case, we will utilize static code analysis tools such as objdump, and IDA to facilitate navigating the executable code of the malware sample we began analyzing earlier in the week, and build some Yara-based detection/identification based on some binary code fragments identified during analysis.

TOC:
00:06:50 - My personal notes on code-level observations about ex1.exe
00:12:25 - Comparison of IDA control-flow-graph with the one I built manually in class in Wk05.2 lecture
00:19:27 - Navigate IDA project by function
00:23:45 - Add comments to interesting findings in the project
00:25:15 - Rename symbols / variables
00:28:50 - Dig into "YYYYYXYYYYY" string artifacts
00:40:00 - Navigating program via call tree
00:41:45 - Extract instruction bytes to build yara binary code pattern
00:51:20 - Analyze instruction data & broaden signature by removing address constants
00:55:30 - Analyze the Base64 code and build yara signature from it
00:57:43 - Demonstrate detecting more samples with pattern built from Base64 function
00:01:00 - Survey a number of other characteristics observed

CS7038: Wk07.2 - Static Code Analysis and Yara Detection Demo

IDA EVM Demo

Week 2 IDA Pro Demo

demo ida bochs windows - Windows kernel debugging with IDA Pro on Bochs (including PDB symbols)

demo ida vmware windows gdb - Windows kernel debugging IDA Pro + VMware + GDB stub + PDB info

Ida Pro debug + OpenOCD attached to an iPhone with a Bonobo Cable using checkm8 exploit

Talos DDR Demo

Hex-Rays

TrustRadius is a technology and business research firm based in Austin, Texas. The company is known as a review platform for verified B2B technology and software reviews through a proprietary algorithm and human verification.

TrustRadius

Home

Software Composition Analysis (SCA) Tools

IDA PRO

Overview

What is IDA PRO?