up

petikvx · Jan 2, 2024 · 15fad17 · 15fad17
1 parent bcd9abc
commit 15fad17
Show file tree

Hide file tree

Showing 5 changed files with 8 additions and 0 deletions.
diff --git a/_posts/Malware Analyze/2024-01-15-unpacking-hydracrypt.md b/_posts/Malware Analyze/2024-01-15-unpacking-hydracrypt.md
@@ -36,3 +36,11 @@ We run the program until it stops at the first breakpoint.
 
 We will go back to the CPU section and then proceed step by step using the F8 key.
 
+![go-cpu](/images/hydracrypt/go-cpu.png)
+
+![end-virtualalloc](/images/hydracrypt/end-virtualloc-01.png)
+
+![end-virtualalloc](/images/hydracrypt/end-virtualloc-02.png)
+
+![end-virtualalloc](/images/hydracrypt/end-virtualloc-03.png)
+
diff --git a/...crypt/vlcsnap-2024-01-02-19h31m53s466.png → images/hydracrypt/end-virtualloc-01.png b/...crypt/vlcsnap-2024-01-02-19h31m53s466.png → images/hydracrypt/end-virtualloc-01.png
diff --git a/...crypt/vlcsnap-2024-01-02-19h41m34s987.png → images/hydracrypt/end-virtualloc-02.png b/...crypt/vlcsnap-2024-01-02-19h41m34s987.png → images/hydracrypt/end-virtualloc-02.png
diff --git a/...crypt/vlcsnap-2024-01-02-19h41m47s223.png → images/hydracrypt/end-virtualloc-03.png b/...crypt/vlcsnap-2024-01-02-19h41m47s223.png → images/hydracrypt/end-virtualloc-03.png
diff --git a/...crypt/vlcsnap-2024-01-02-19h30m47s269.png → images/hydracrypt/go-cpu.png b/...crypt/vlcsnap-2024-01-02-19h30m47s269.png → images/hydracrypt/go-cpu.png