Reverse Analysis of Malwares: A Case Study on QQ Passwords Collection

摘要

Malware analysis is becoming an importantspecialization in the field of digital investigation. Reverseanalysis is the most common method in analyzing malware.The reverse analysis process is an advanced and efficientmethod that exposes the intention and processes of malware.This paper introduces the basic concepts, methods, and toolsof the reverse analysis process. A true case study of malwarein China, used to obtain QQ account information andpasswords, is presented to illustrate the whole process of thereverse analysis process of malware from the aspects ofchecking pack, unpacking, breakpoint setting, programtracing, anti-kill technique and key information acquiring.