41554 blogs · [ { "id": "01a0d7a6-b9e8-7064-a84f-58463b13af67", "title": "Malware analysis: part 12. Section entropy from scratch in pure C: a tiny packed/encrypted detector.", "url": "https://cocomelonc.github.io/malware/2026/09/23/malware-analysis-12.html", "published_at": "2026-09-23T02:00:00+00:00" }, { "id": "01a0b0b7-aed5-7362-94c6-f1aa98287e94", "title": "MacOS malware persistence 13: man.conf. Simple C example", "url": "https://cocomelonc.github.io/macos/2026/09/15/mac-malware-persistence-13.html", "published_at": "2026-09-15T00:00:00+00:00" }, { "id": "01a08761-50b2-72cf-a380-d45e9bff5c45", "title": "Anti-DDoS research part 4: an information-gain oracle. Practical Python example", "url": "https://cocomelonc.github.io/linux/2026/09/07/ddos-information-gain-oracle.html", "published_at": "2026-09-07T01:00:00+00:00" }, { "id": "01a08761-50b2-72cf-a380-d45e9c1bdb00", "title": "Malware development trick 66: TLS callbacks before main. Simple C example", "url": "https://cocomelonc.github.io/malware/2026/09/05/malware-tricks-66.html", "published_at": "2026-09-05T03:00:00+00:00" }, { "id": "01a08761-50b2-72cf-a380-d45e9ceedf46", "title": "Malware shellcode delivery via signal - part 5. Physics-guided AI demodulator. PyTorch example", "url": "https://cocomelonc.github.io/malware/2026/08/31/malware-tricks-65.html", "published_at": "2026-08-31T03:00:00+00:00" }, { "id": "01a08761-50b2-72cf-a380-d45e9d5b94c4", "title": "Malware development trick 64: PE file bloating and overlay data. Simple C example", "url": "https://cocomelonc.github.io/malware/2026/08/25/malware-tricks-64.html", "published_at": "2026-08-25T01:00:00+00:00" }, { "id": "01a08761-50b2-72cf-a380-d45e9d78b934", "title": "Malware development trick 63: modifying PE version metadata and icon. Simple C example", "url": "https://cocomelonc.github.io/malware/2026/08/24/malware-tricks-63.html", "published_at": "2026-08-24T01:00:00+00:00" }, { "id": "01a08761-50b2-72cf-a380-d45e9e39abc1", "title": "Malware shellcode delivery via signal - part 4. Embedding Bell 202 FSK into MP3 and recovering the symbol clock. Python and C example", "url": "https://cocomelonc.github.io/malware/2026/08/01/malware-tricks-62.html", "published_at": "2026-08-01T03:00:00+00:00" }, { "id": "01a08761-50b2-72cf-a380-d45e9efa2223", "title": "Malware development trick 61: Module stomping. Simple C example", "url": "https://cocomelonc.github.io/malware/2026/07/29/malware-tricks-61.html", "published_at": "2026-07-29T02:00:00+00:00" }, { "id": "01a08761-50b2-72cf-a380-d45e9fbf24a9", "title": "Malware analysis: part 11. How to create your own mini-GPT for binary analysis.", "url": "https://cocomelonc.github.io/malware/2026/07/25/malware-analysis-11.html", "published_at": "2026-07-25T02:00:00+00:00" }, { "id": "01a08761-50b2-72cf-a380-d45ea045ef6e", "title": "Malware development trick 60: Function stomping (remote process). Simple C example", "url": "https://cocomelonc.github.io/malware/2026/07/16/malware-tricks-60.html", "published_at": "2026-07-16T02:00:00+00:00" }, { "id": "01a08761-50b2-72cf-a380-d45ea04cede6", "title": "Malware and cryptography 45 - Shamir Secret Sharing. Simple C example.", "url": "https://cocomelonc.github.io/malware/2026/07/02/malware-cryptography-45.html", "published_at": "2026-07-02T00:00:00+00:00" } ] posts Claim your blog

Back to cocomelonc.github.io

Blog · corpus.blog/blogs/cocomelonc.github.io/posts

cocomelonc.github.io

cocomelonc.github.io

2026

Malware analysis: part 12. Section entropy from scratch in pure C: a tiny packed/encrypted detector.original ↗

23 Sept 2026

MacOS malware persistence 13: man.conf. Simple C example original ↗

15 Sept 2026

Anti-DDoS research part 4: an information-gain oracle. Practical Python example original ↗

7 Sept 2026

Malware development trick 66: TLS callbacks before main. Simple C example original ↗

5 Sept 2026

Malware shellcode delivery via signal - part 5. Physics-guided AI demodulator. PyTorch example original ↗

31 Aug 2026

Malware development trick 64: PE file bloating and overlay data. Simple C example original ↗

25 Aug 2026

Malware development trick 63: modifying PE version metadata and icon. Simple C example original ↗

24 Aug 2026

Malware shellcode delivery via signal - part 4. Embedding Bell 202 FSK into MP3 and recovering the symbol clock. Python and C example original ↗

1 Aug 2026

Malware development trick 61: Module stomping. Simple C example original ↗

29 Jul 2026

Malware analysis: part 11. How to create your own mini-GPT for binary analysis.original ↗

25 Jul 2026

Malware development trick 60: Function stomping (remote process). Simple C example original ↗

16 Jul 2026

Malware and cryptography 45 - Shamir Secret Sharing. Simple C example.original ↗

2 Jul 2026