Log in

View Full Version : Nice paper, reverse engineering a virus


dELTA
November 15th, 2004, 19:10
Quite a nice (and big) paper about a full reverse engineering of the Bagle worm to C source code. Also contains good reversing info in general for newbies and up.

Reverse Code Engineering: An In-Depth Analysis of the Bagle Virus:

http://rozinov.sfs.poly.edu/papers/bagle_analysis_v.1.0.pdf

Opcode
November 15th, 2004, 19:48
Very nice paper.
Thanx for the link!

Regards,
Opcode

lifewire
November 16th, 2004, 12:04
Indeed, a nice paper. Only one thing that surprises me is to see that even the guys that can write a paper like this, use dysfunctional comments like:

Code:

jecxz loc_1234 ;jump to loc_1234 if ecx is 0


and such.

Kayaker
November 17th, 2004, 00:57
...and then there are the dysfunctional comments (and some good ones) about the paper at

http://developers.slashdot.org/article.pl?sid=04/11/15/1315208&tid=220&tid=156&tid=172&tid=1