maldev

• lab 1: run the payload in .rsrc section
• lab 2: base64 encoding
• lab 3: encrypt payload with XOR operation
• lab 4: encrypt payload with AES algorithm
• lab 5: hiding imports via dynamic WinAPI function resolving, string obfuscation
• lab 6: backdoor putty.exe with shellcode (patch the binary via x32dbg)
• lab 7: inject our own code into a legitimate process, e.g. notepad.exe