{"guid":"import-ef2be2cea3b7d868a1","title":"Malware Joe Blobs","subtitle":"An overview of stuff that \"Malware Joe\" puts into his creations.","slug":"sigint10_3895_en_malware_joe_blobs","link":"http://events.ccc.de/sigint/2010/wiki/Fahrplan/events/3895.en.html","description":"The talk is an overview about different blobs or common techniques that are often found in modern malware. Besides information about rootkidding, spreading, and the like, we present some nice \"fails\" found in malware.\n","original_language":"eng","persons":["Felix Leder","Tillmann Werner"],"tags":["sigint10"," Hacker"],"view_count":54,"promoted":false,"date":"2010-05-23T02:00:00.000+02:00","release_date":"2010-07-20T02:00:00.000+02:00","updated_at":"2026-04-02T17:30:05.352+02:00","length":3803,"duration":3803,"thumb_url":"https://static.media.ccc.de/media/conferences/sigint10/sigint10_3895_en_malware_joe_blobs.jpg","poster_url":"https://static.media.ccc.de/media/conferences/sigint10/sigint10_3895_en_malware_joe_blobs_preview.jpg","timeline_url":"https://static.media.ccc.de/media/conferences/sigint10/import-ef2be2cea3b7d868a1-timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/conferences/sigint10/import-ef2be2cea3b7d868a1-thumbnails.vtt","frontend_link":"https://media.ccc.de/v/sigint10_3895_en_malware_joe_blobs","url":"https://api.media.ccc.de/public/events/import-ef2be2cea3b7d868a1","conference_title":"SIGINT10","conference_url":"https://api.media.ccc.de/public/conferences/sigint10","related":[{"event_id":431,"event_guid":"import-67ef8e54c4e94ca53b","weight":1},{"event_id":531,"event_guid":"import-2b73789ae5c047b9c2","weight":1},{"event_id":540,"event_guid":"import-e5345e460009383076","weight":1},{"event_id":546,"event_guid":"import-e52a4c822ae4d466a2","weight":1},{"event_id":560,"event_guid":"import-2ed336d02a5ac102bd","weight":1},{"event_id":574,"event_guid":"import-f2fcb98d8655d4861e","weight":1},{"event_id":576,"event_guid":"import-b5dafc00b677681209","weight":1},{"event_id":581,"event_guid":"import-de1b0eff10c8cb5c93","weight":1},{"event_id":594,"event_guid":"import-c2d32eef2a31d3080e","weight":1},{"event_id":642,"event_guid":"import-1af2fae3d5fcdb57b7","weight":1},{"event_id":647,"event_guid":"import-5d278cc14212d74a4b","weight":1},{"event_id":664,"event_guid":"import-70c200884c5a8b15b6","weight":1},{"event_id":935,"event_guid":"import-d9a34dd8bf60695047","weight":1},{"event_id":1307,"event_guid":"import-4e23139e8c3b0534b2","weight":1},{"event_id":1334,"event_guid":"import-999159d42d326f39e3","weight":2},{"event_id":1341,"event_guid":"import-a8f4cba930451edf37","weight":1},{"event_id":1351,"event_guid":"import-86ae3abe6a434f4cec","weight":1},{"event_id":1526,"event_guid":"import-8f741823f0d689a05e","weight":1},{"event_id":1542,"event_guid":"import-052f3eb3e03ca7685e","weight":1},{"event_id":1728,"event_guid":"3poSeUcpc6woNaI5dhATcQ","weight":1},{"event_id":2212,"event_guid":"4aOXU9cdQYbirV0Q-k5usw","weight":1},{"event_id":2386,"event_guid":"4bd97fd3-c85e-48b1-8456-cc208545a911","weight":1},{"event_id":2735,"event_guid":"5c0323b6-c538-4fb6-8d70-d08def6bf865","weight":1},{"event_id":2757,"event_guid":"303801f5-9eaf-41a9-9022-92dc5cd702d2","weight":1},{"event_id":2788,"event_guid":"d2328de5-84a4-11e5-9649-adf34cd290c2","weight":1},{"event_id":2792,"event_guid":"d23292e5-84a4-11e5-9649-a11fca1ffa8c","weight":1},{"event_id":2939,"event_guid":"c87fa147-d1f4-4353-82db-c3e5b646884b","weight":1},{"event_id":3170,"event_guid":"AcJAsqjOmTr4uxDzmUZFew","weight":1},{"event_id":3209,"event_guid":"9lMPMu99GEqkOTTmlsA4eQ","weight":1},{"event_id":3617,"event_guid":"cb67ad7f-7e12-4f34-aec0-748a61f3f958","weight":2},{"event_id":3667,"event_guid":"6347d122-daf0-4b30-851c-32cac06bf6bd","weight":1},{"event_id":3696,"event_guid":"9d36932f-616a-4677-b924-60c1986fbbfc","weight":1},{"event_id":3762,"event_guid":"25e2df7d-5740-4c2f-bc34-986326d606fe","weight":1},{"event_id":3774,"event_guid":"a26a0d23-549d-5bd6-8f1e-9803628d5850","weight":1},{"event_id":3853,"event_guid":"efeeaebc-3f29-11e7-9ba7-2f214305c877","weight":1},{"event_id":3869,"event_guid":"y51b5xL9m5uzZtXF7dFzLw","weight":1},{"event_id":3934,"event_guid":"uEjGRz2ikYXsemssGT5smQ","weight":1},{"event_id":3986,"event_guid":"ff2bf44f-3417-5914-a017-9777087662f7","weight":1},{"event_id":4299,"event_guid":"63b79857-ca2c-4fb4-b56c-b7807f947c01","weight":1},{"event_id":4766,"event_guid":"19b7e5d7-bba7-46da-afbc-f16d43fe395f","weight":1},{"event_id":4791,"event_guid":"8d29d28d-a222-4731-bdfc-fde590385cae","weight":1},{"event_id":4831,"event_guid":"f068c5df-f969-4206-befb-540326e3d053","weight":1},{"event_id":4870,"event_guid":"2cb8f405-10be-40f5-ae95-579f024a0c84","weight":1},{"event_id":4876,"event_guid":"dec6a7e0-2651-4bb5-8300-977795e901ed","weight":1},{"event_id":5048,"event_guid":"2b1c43f0-a0b6-4a65-b249-dad071ee0c5e","weight":1},{"event_id":6248,"event_guid":"a142251b-81f2-4195-95ba-c0f3818ce884","weight":1}],"recordings":[{"size":862,"length":3803,"mime_type":"audio/ogg","language":"eng","filename":"sigint10_3895_en_malware_joe_blobs.ogg","state":"downloaded","folder":"audio","high_quality":true,"width":1280,"height":720,"updated_at":"2014-05-10T15:26:24.627+02:00","recording_url":"https://cdn.media.ccc.de/events/sigint10/audio/sigint10_3895_en_malware_joe_blobs.ogg","url":"https://api.media.ccc.de/public/recordings/938","event_url":"https://api.media.ccc.de/public/events/import-ef2be2cea3b7d868a1","conference_url":"https://api.media.ccc.de/public/conferences/sigint10"},{"size":862,"length":3803,"mime_type":"video/mp4","language":"eng","filename":"sigint10_3895_en_malware_joe_blobs.mp4","state":"downloaded","folder":"mp4","high_quality":true,"width":1280,"height":720,"updated_at":"2016-01-27T11:03:00.895+01:00","recording_url":"https://cdn.media.ccc.de/events/sigint10/mp4/sigint10_3895_en_malware_joe_blobs.mp4","url":"https://api.media.ccc.de/public/recordings/937","event_url":"https://api.media.ccc.de/public/events/import-ef2be2cea3b7d868a1","conference_url":"https://api.media.ccc.de/public/conferences/sigint10"},{"size":862,"length":3803,"mime_type":"video/webm","language":"eng","filename":"sigint10_3895_en_malware_joe_blobs.webm","state":"downloaded","folder":"webm","high_quality":true,"width":1280,"height":720,"updated_at":"2016-01-27T11:03:00.925+01:00","recording_url":"https://cdn.media.ccc.de/events/sigint10/webm/sigint10_3895_en_malware_joe_blobs.webm","url":"https://api.media.ccc.de/public/recordings/936","event_url":"https://api.media.ccc.de/public/events/import-ef2be2cea3b7d868a1","conference_url":"https://api.media.ccc.de/public/conferences/sigint10"}]}