REblog

Malicious software will often contain anti-debugger code to make it more difficult to analyze the target. One of the many common anti-debugger tricks is breakpoint-searching. This involves scanning areas of memory for breakpoints set by the analyst Read More

Have you ever seen code that you know belongs to a function, but IDA refuses to create a function out of it? If so, you're probably familiar with disassemblies that look like this: Figure 1. If IDA doesn't interpret code as a part of Read More

My name is Jason Geffner. I'm a Reverse Engineer on Microsoft's Anti-Malware Team. I have been practicing the art of reverse engineering for the past nine years, and have created this blog to share my future experiences and discoveries with Read More