Make Malware Analysis FASTER with Binary Emulation

Anuj's Channel: / @sonianuj
Free Cybersecurity Education and Ethical Hacking with John Hammond
📧 JOIN MY NEWSLETTER ➡ jh.live/email
🙏 SUPPORT THE CHANNEL ➡ jh.live/patreon
🤝 SPONSOR THE CHANNEL ➡ jh.live/sponsor
🌎 FOLLOW ME EVERYWHERE ➡ jh.live/twitter ↔ jh.live/linkedin ↔ jh.live/discord ↔ jh.live/instagram ↔ jh.live/tiktok
💥 SEND ME MALWARE ➡ jh.live/malware
🔥 KZbin ALGORITHM ➡ Like, Comment, & Subscribe!

[@d3c0deFPV]

Instant subscribe to @sonianuj. Shame about the audio issues but they're fairly brief and you don't lose too much.John, I appreciate that you just let people talk rather than constantly interrupting. Good content.

[@sonianuj]

Thanks for subscribing! Sorry for those audio issues on my end, my rode NTG mic doesn't seem to be performing as expected. Working on a fix!

[@nazishbatool1304]

​@@sonianuj😊

[@KL-og8gg]

This is awesome John, anyway to make the camera windows smaller?

[@gat2871]

I remember watching his "Malware Evasion Techniques: API Unhooking" video. Really good. A good cyber badass, definitely

[@sonianuj]

Thank you so much!

[@qilingandfriends]

I am the dude created Qiling. This is a good video! Kudos.

[@sonianuj]

Thanks for watching, that means a lot to me. And, of course, thanks for creating Qiling!

[@user-js4wi8mp7m]

This is really awesome! I didn't know we are able to run a specific function without run the whole binary. I want to learn more! Thanks!

[@ihacksi]

Wonderful resource and guest!

[@volks8426]

is it possible to emulate keygens? Can i combine the emulation of the algorithm and supply the input at the same time onto the stack where the input would live to produce keys? (crackme keygens to be specific)

[@Trueblood506]

Unfortunately webcams are blocking a lot of screen during x64db steps on exporting the binary from memory. It becomes hard to follow what is being referenced in the video on arguments passed to virtualprotect

[@sage2099]

Link to his KZbin channel?

[@rationalbushcraft]

I found it searching for Anuj Soni.

[@MrDrgdf]

@sonianuj

[@brettlaw4346]

How would you analyze spam emails to determine what the spammers are sending you? What point of receiving an email would you no longer be comfortable opening an email on a production system?

[@KenPryor]

Great video! I love Anuj'sYT channel too. He has some great content.

[@jonnylacey7263]

Best thing about two KZbinrs getting together for a demo/interview...A/V is always on point. Great video gentlemen!

[@abdirahmanburyar]

Great as always sir.

[@dukejonathan493]

Please do a full course video on beginner to advanced penetration testing. You appear more experienced than most other youtubers I've seen. 🙏🙏🙏🙏🙏🙏🙏🙏🙏🙏🙏🙏🙏🙏🙏🙏

[@christophertharp7763]

is there anyway we can get a link ti that vm he is using?

[@tommyhuffman7499]

Such an amazing video!

[@fashionnova9839]

wow john great watch the classic so happy to see someone wearing it in 2024 got mine in 2008 or before.

[@replikvltyoutube3727]

Could you do this with rust binaries? I heard Rust compiles to some hard to analyze form.

[@sonianuj]

Good question! Honestly haven't tried...

[@squid13579]

hey john make video on gui version of radare2 ( iaito ) amazing framewok and it similar to cutter as well. nice video 👍

[@jonmena21]

You know this guy knows his stuff when john is just silently listening just like us 🤣

[@eyephpmyadmin6988]

Great video

[@malisancube01]

I like Anuj. Awesome videos on his channel and clarity in explanation.

[@sonianuj]

Thank you so much!

[@malisancube01]

@@sonianuj I'd be happy to learn if you decide to make a paid course

[@cristophersoto1244]

What a such a crack that guy, lot to learn out there. Malware analysis is that skill that I want to master either I used it or not in my day to day job

[@ravisp2998]

really cool video..informative

[@xCheddarB0b42x]

This detailed de-obfuscation video is incredible. What's more incredible is that I mostly followed along! 😅

[@boogieman97]

If you have the opportunity, you should consider taking the SANS courses he authored. This quality he is given, is what you will get in a 5 day long lecture.

[@xCheddarB0b42x]

@@boogieman97 Even in my current role, I can't afford it, but I have my eye on them for sure. Thanks for the heads up!

[@boogieman97]

@@xCheddarB0b42x please note there is a chance to do "work-study" you will be a facilitator of SANS, which really helps them. But because you volunteer for them, the price is reduced. Please know that there is a selection, so not a guarantee. (footnote, the price is heavily reduced). I would not talk about the details, as this is not up to me. I am not working for SANS, just a guy with a very happy experience.

[@xCheddarB0b42x]

@@boogieman97 I did not know that. Thank you!

[@logiciananimal]

Proving that a monster can be powerful, even without a head! neat!

[@BeCoolIT]

Good!!!

[@arseniy.k8895]

thank you💸💸💸

[@axelrod-_-]

this video have audio issue

[@hazelora]

get yourself someone who smiles like john at anuj

[@boostenmkiv]

As a FOR610 alum, love this content and of course Anujs channel!

[@raihanrafi3665]

VSCode for malware analysis pro🙏

[@hackwithprogramming7849]

Exploit development for windows plz ❤

[@Alfred-Neuman]

lol

[@hackwithprogramming7849]

@@Alfred-Neuman what ?

[@Alfred-Neuman]

@@hackwithprogramming7849 😂

[@embeeror]

John the videos when you are not shouting or cranking the microphone volume to 11, like this one are much easier to watch. Most of the videos as of late are very loud and causing frustration.

[@_JohnHammond]

Super appreciate the constructive criticism -- so just for my own clarification and understanding, the feedback is to be quieter, less enthusiasm and not talk with my hands?

[@nordgaren2358]

You shouldn't have your volume up so loud.

[@clarkesuperman]

Did I just get mogged

[@lootclan5842]

1 milion

[@TheHacker404]

The Voices are a little bit not Going Normally the voices are stopping at some points

[@MC-ts6sl]

huh?

[@meooow5996]

🎉

[@JackofTradeApps]

😎

[@boogieman97]

Anuj Soni, this guy is truly amazing. He wrote the SANS FOR710 course, really liked doing that one

[@sonianuj]

Thank you, so kind of you to say. Very happy to hear you enjoyed 710!

[@boogieman97]

​@@sonianuj yes I enjoyed the course a lot, last year january 2023 in Amsterdam with Michael Murr. The way that this course is thought through is especially good (didactic) perspective. Not touching very specific topics like steganography only, but from all the way of identifying certain API's, to understanding both assembly as pseudo C. I have recently rewrote that decryption routine based on assembly and Pseudo C to Python.