1
58%
master: 62%

Ran 05 May 2017 11:23AM UTC

Files 169

Run time 7s

Badge

Embed ▾

Committed 05 May 2017 11:09AM UTC coverage: 57.986% (+0.1%) from 57.838%

Job # ONLYINSTALL=yes

Build Type

push

travis-ci

Committed by

jbremer

Commit Message

unicorn engine integration for shikata ga nai decoding

While working on proper interpretation of shellcode payloads from [1] we
found some shikata ga nai-encoded payloads. Using Unicorn Engine we
attempt to unpack this first layer to reach the actual shellcode. For
now this only works partially due to one or more suspected bugs in
Unicorn Engine's support for self-modifying code [2].

[1]: http://researchcenter.paloaltonetworks.com/2017/03/unit42-pulling-back-the-curtains-on-encodedcommand-powershell-attacks/
[2]: https://github.com/unicorn-engine/unicorn/issues/820

Run Details

8056 of 13893 relevant lines covered (57.99%)

0.58 hits per line

jbremer / cuckoo / 529 / 1
58%
master: 62%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 529.1 (ONLYINSTALL=yes)

jbremer / cuckoo / 529 / 1 58% master: 62%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 529.1 (ONLYINSTALL=yes)

jbremer / cuckoo / 529 / 1
58%
master: 62%

README BADGES
x