posted in Stuff on Apr 2nd, 2009
I wanted to give a rough overview how a Trojan horse is organised in itself and visualise its structure a little. It took me some time and after some hours of work the result is the diagram below. It shows a Trojans install and start routines and the three main modules with its functions. You [...]
read full post »
posted in Articles on Mar 17th, 2009
Summarizing the lifecycle of a trojan horse as “configuration, infection, action, deletion” would be too brief and you would miss a lot of important and valuable information that makes you understand how they are constructed, how the internal structure looks like and how to breathe life into them. I want to give you the whole, [...]
read full post »
posted in Tools & sources on Mar 11th, 2009
Below, you can find a link to the source code with the function(s) to create a screenshot via the Win32 API. These are general functions so I take a picture of the whole desktop and not just of the window that is currently in the foreground. panzer_screencapture.cpp
read full post »
posted in Tools & sources on Mar 10th, 2009
Below, you can find a link to the source code with the function(s) to locate the Internet Explorer favorites file, extract all the links and send it back to the client. panzer_browserfavoritesinfos.cpp
read full post »
posted in Stuff on Feb 27th, 2009
I guess it is necessary to add some further clearing words about the purpose of all this here to avoid confusion … The last year many of the sites that hosted source code, documentation and discussion boards about malware were urged to close down. None of them reappeared and only some few of the same [...]
read full post »