Trainings Samples

Clear

SHA256	Author	Difficulty	Tags	Goal	Solutions	Likes	Comments	Created
`75da9dfe4d0ef6db1d68533ef66a70d4c26230fc82e50e6428f4931800f7b3b2`	0xca5ade19a931	medium	shellcode api hashing x64 stage 2	This sample is a second stage payload shellcode extracted from a loader. The goal is to understand its API hashing algorithm and to decrypt the third-stage payload. In addition tampering with security products as evasion techniques can be identified. How is the third-stage payload executed?	1		1	27 Sep 2026
`5bed39728e404838ecd679df65048abcb443f8c7a9484702a2ded60104b8c4a9`	humpty_tony	medium	api hashing anti-vm supply chain	This post’s goal is to teach someone how to take a “real-world” supply-chain DLL dropper/loader and turn it into a set of actionable reversing primitives: - Reconstruct the full execution chain from NPM install hook → rundll32 execution of a shipped DLL export → staged loader → staged stealer, and understand where “initial access” ends and “payload logic” begins. - Deobfuscate a modern loader’s internals efficiently by focusing on the repeatable patterns that matter: - PEB-walking + import hashing - Encrypted static strings - Hook checks + indirect syscalls - Extract a protocol/crypto story from messy networking code, even if you don’t fully reverse the C2	1		0	04 Jan 2026

Page 1 of 1