diff --git a/labs/2-1.AdvancedStaticAnalysis/helloWorld-c/README.md b/labs/2-1.AdvancedStaticAnalysis/helloWorld-c/README.md new file mode 100644 index 0000000..792a82b --- /dev/null +++ b/labs/2-1.AdvancedStaticAnalysis/helloWorld-c/README.md @@ -0,0 +1,16 @@ +# Hello, World! under a Microscope + +Examine the two following executables. They are both identical and simple in terms of design. Both print "Hello, World!" to the console. + +```c +#include +int main() { + printf("Hello, World!"); + return 0; +} +``` + +However, one of the binaries has `debug symbols` included and one has them stripped out. + +## Safety Note +Both of these binaries are simple Hello, World! examples and are not held within password protected zip folders. There is no malicious functionality within either binary. diff --git a/labs/2-1.AdvancedStaticAnalysis/helloWorld-c/helloWorld-stripped.exe b/labs/2-1.AdvancedStaticAnalysis/helloWorld-c/helloWorld-stripped.exe new file mode 100755 index 0000000..11557c4 Binary files /dev/null and b/labs/2-1.AdvancedStaticAnalysis/helloWorld-c/helloWorld-stripped.exe differ diff --git a/labs/2-1.AdvancedStaticAnalysis/helloWorld-c/helloWorld.c b/labs/2-1.AdvancedStaticAnalysis/helloWorld-c/helloWorld.c new file mode 100644 index 0000000..dcfb86b --- /dev/null +++ b/labs/2-1.AdvancedStaticAnalysis/helloWorld-c/helloWorld.c @@ -0,0 +1,5 @@ +#include +int main() { + printf("Hello, World!"); + return 0; +} diff --git a/labs/2-1.AdvancedStaticAnalysis/helloWorld-c/helloWorld.exe b/labs/2-1.AdvancedStaticAnalysis/helloWorld-c/helloWorld.exe new file mode 100755 index 0000000..6c3c97d Binary files /dev/null and b/labs/2-1.AdvancedStaticAnalysis/helloWorld-c/helloWorld.exe differ diff --git a/labs/2-2.AdvancedDynamicAnalysis/Dropper.DownloadFromURL.exe.7z b/labs/2-2.AdvancedDynamicAnalysis/Dropper.DownloadFromURL.exe/Dropper.DownloadFromURL.exe.7z similarity index 100% rename from labs/2-2.AdvancedDynamicAnalysis/Dropper.DownloadFromURL.exe.7z rename to labs/2-2.AdvancedDynamicAnalysis/Dropper.DownloadFromURL.exe/Dropper.DownloadFromURL.exe.7z diff --git a/labs/2-2.AdvancedDynamicAnalysis/README.txt b/labs/2-2.AdvancedDynamicAnalysis/Dropper.DownloadFromURL.exe/README.txt similarity index 100% rename from labs/2-2.AdvancedDynamicAnalysis/README.txt rename to labs/2-2.AdvancedDynamicAnalysis/Dropper.DownloadFromURL.exe/README.txt diff --git a/labs/2-2.AdvancedDynamicAnalysis/password.txt b/labs/2-2.AdvancedDynamicAnalysis/Dropper.DownloadFromURL.exe/password.txt similarity index 100% rename from labs/2-2.AdvancedDynamicAnalysis/password.txt rename to labs/2-2.AdvancedDynamicAnalysis/Dropper.DownloadFromURL.exe/password.txt diff --git a/labs/2-2.AdvancedDynamicAnalysis/sha256sum.txt b/labs/2-2.AdvancedDynamicAnalysis/Dropper.DownloadFromURL.exe/sha256sum.txt similarity index 100% rename from labs/2-2.AdvancedDynamicAnalysis/sha256sum.txt rename to labs/2-2.AdvancedDynamicAnalysis/Dropper.DownloadFromURL.exe/sha256sum.txt diff --git a/labs/2-2.AdvancedDynamicAnalysis/helloWorld-c/README.md b/labs/2-2.AdvancedDynamicAnalysis/helloWorld-c/README.md new file mode 100644 index 0000000..792a82b --- /dev/null +++ b/labs/2-2.AdvancedDynamicAnalysis/helloWorld-c/README.md @@ -0,0 +1,16 @@ +# Hello, World! under a Microscope + +Examine the two following executables. They are both identical and simple in terms of design. Both print "Hello, World!" to the console. + +```c +#include +int main() { + printf("Hello, World!"); + return 0; +} +``` + +However, one of the binaries has `debug symbols` included and one has them stripped out. + +## Safety Note +Both of these binaries are simple Hello, World! examples and are not held within password protected zip folders. There is no malicious functionality within either binary. diff --git a/labs/2-2.AdvancedDynamicAnalysis/helloWorld-c/helloWorld-stripped.exe b/labs/2-2.AdvancedDynamicAnalysis/helloWorld-c/helloWorld-stripped.exe new file mode 100755 index 0000000..11557c4 Binary files /dev/null and b/labs/2-2.AdvancedDynamicAnalysis/helloWorld-c/helloWorld-stripped.exe differ diff --git a/labs/2-2.AdvancedDynamicAnalysis/helloWorld-c/helloWorld.c b/labs/2-2.AdvancedDynamicAnalysis/helloWorld-c/helloWorld.c new file mode 100644 index 0000000..dcfb86b --- /dev/null +++ b/labs/2-2.AdvancedDynamicAnalysis/helloWorld-c/helloWorld.c @@ -0,0 +1,5 @@ +#include +int main() { + printf("Hello, World!"); + return 0; +} diff --git a/labs/2-2.AdvancedDynamicAnalysis/helloWorld-c/helloWorld.exe b/labs/2-2.AdvancedDynamicAnalysis/helloWorld-c/helloWorld.exe new file mode 100755 index 0000000..6c3c97d Binary files /dev/null and b/labs/2-2.AdvancedDynamicAnalysis/helloWorld-c/helloWorld.exe differ