Unflattening ConfuserEx .NET Code in IDA

In this paper, we’re studying the ConfuserEx obfuscation mechanism of a Ginzo .NET sample. This class of obfuscator is known as code flatteners. We describe how it can be dealt with using a Python script within IDA Pro, a famous reverse-engineering tool.

Unflattening ConfuserEx .NET Code in IDA

Filesize: 363 KB | Type: PDF | Language: EN

Back to top