The nineth article (38 pages) of the Malware Analysis Series (MAS), a step-by-step malware analysis and reverse engineering series, is available for reading on:
(PDF): https://exploitreversing.com/wp-content/uploads/2025/01/mas_09-1.pdf
I hope this article helps professionals from cybersecurity communities around the world.
Have an excellent and keep reversing!
Alexandre Borges
(JANUARY/08/2025)
PS: there is a typo on page 07 at the last bullet. Where you read “0x00000095” you must change it to “0x00000099“, as stated at the previous bullet.