PE

Malware & C2

Static Analysis of Windows PE Files: Headers, Imports, Strings, and capa

A practical walkthrough of statically triaging Windows PE files using pestudio, capa, and the CLI — plus blue-team detection.
Malware & C2

Windows Shellcode: Writing and Analyzing Position-Independent Payloads

Build a position-independent Windows shellcode with PEB walking and API hashing, then dissect it with scdbg and a debugger.
Malware & C2

Process Injection Internals: DLL Injection, Reflective Loading, and Process Hollowing

A practical breakdown of classic DLL injection, reflective loading, and process hollowing on Windows, plus blue-team detection.