Windows APT Warfare

Table of Contents

1. From Source to Binaries – The Journey of a C Program
2. Process Memory – File Mapping, PE Parser, tinyLinker, and Hollowing
3. Dynamic API Calling – Thread, Process, and Environment Information
4. Shellcode Technique – Exported Function Parsing
5. Application Loader Design
6. PE Module Relocation
7. PE to Shellcode – Transforming PE Files into Shellcode
8. Software Packer Design
9. Digital Signature – Authenticode Verification
10. Reversing User Account Control and Bypassing Tricks
11. Appendix – NTFS, Paths, and Symbols