529
58%
master: 62%

Ran 05 May 2017 11:23AM UTC

Jobs 1

Files 169

Run time 8s

Badge

Embed ▾

pending completion

Build # 529

Build Type

push

travis-ci

Committed by

jbremer

Commit Message

unicorn engine integration for shikata ga nai decoding

While working on proper interpretation of shellcode payloads from [1] we
found some shikata ga nai-encoded payloads. Using Unicorn Engine we
attempt to unpack this first layer to reach the actual shellcode. For
now this only works partially due to one or more suspected bugs in
Unicorn Engine's support for self-modifying code [2].

[1]: http://researchcenter.paloaltonetworks.com/2017/03/unit42-pulling-back-the-curtains-on-encodedcommand-powershell-attacks/
[2]: https://github.com/unicorn-engine/unicorn/issues/820

Run Details

8056 of 13893 relevant lines covered (57.99%)

0.58 hits per line

Jobs

ID	Job ID	Ran	Files	Coverage
1	529.1 (ONLYINSTALL=yes)	05 May 2017 11:23AM UTC	0	57.99	Travis Job 529.1

Source Files on build 529

Detailed source file information is not available for this build.

jbremer / cuckoo / 529
58%
master: 62%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 529

jbremer / cuckoo / 529 58% master: 62%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 529

jbremer / cuckoo / 529
58%
master: 62%

README BADGES
x