{"id":4349,"date":"2013-11-20T22:51:41","date_gmt":"2013-11-20T13:51:41","guid":{"rendered":"http:\/\/apollo89.com\/wordpress\/?p=4349"},"modified":"2013-12-11T22:57:19","modified_gmt":"2013-12-11T13:57:19","slug":"%ec%8b%a4%ec%a0%84-%ec%95%85%ec%84%b1%ec%bd%94%eb%93%9c%ec%99%80-%eb%a9%80%ec%9b%a8%ec%96%b4-%eb%b6%84%ec%84%9d-1%ec%9e%a5-%ea%b8%b0%ec%b4%88-%ec%a0%95%ec%a0%81%eb%b6%84%ec%84%9d-%ec%8b%a4%ec%8a%b51","status":"publish","type":"post","link":"https:\/\/apollo89.com\/wordpress\/?p=4349","title":{"rendered":"\uc2e4\uc804 \uc545\uc131\ucf54\ub4dc\uc640 \uba40\uc6e8\uc5b4 \ubd84\uc11d – 1\uc7a5 \uae30\ucd08 \uc815\uc801\ubd84\uc11d \uc2e4\uc2b5 1-2"},"content":{"rendered":"

 <\/p>\n

Notice : \ud574\ub2f9 \uc790\ub8cc\uac00 \uc800\uc791\uad8c\ub4f1\uc5d0 \uc758\ud574\uc11c \ubb38\uc81c\uac00 \uc788\ub2e4\uba74 \ubc14\ub85c \uc0ad\uc81c\ud558\uaca0\uc2b5\ub2c8\ub2e4.
\n\uc5f0\uad6c\ubaa9\uc801\uc73c\ub85c \uc0ac\uc6a9\ud558\uc9c0 \uc54a\uace0 \uc545\uc758\uc801\uc778 \ubaa9\uc801\uc73c\ub85c \uc774\uc6a9\ud560 \uacbd\uc6b0 \ubc1c\uc0dd\ud560 \uc218 \uc788\ub294 \ubc95\uc801\uc740 \ucc45\uc784\uc740 \ubaa8\ub450 \ubcf8\uc778\uc5d0\uac8c \uc788\uc2b5\ub2c8\ub2e4.
\n<\/strong><\/p>\n

\"Practical_Malware_Analysis\"<\/a>
\n[\uad6c\ub9e4\ud558\uae30]<\/a><\/p>\n

\uc2e4\uc804 \uc545\uc131\ucf54\ub4dc\uc640 \uba40\uc6e8\uc5b4 \ubd84\uc11d – 1\uc7a5 \uae30\ucd08 \uc815\uc801\ubd84\uc11d \uc2e4\uc2b5 1-1<\/a>
\n\uc2e4\uc804 \uc545\uc131\ucf54\ub4dc\uc640 \uba40\uc6e8\uc5b4 \ubd84\uc11d – 1\uc7a5 \uae30\ucd08 \uc815\uc801\ubd84\uc11d \uc2e4\uc2b5 1-2<\/a>
\n\uc2e4\uc804 \uc545\uc131\ucf54\ub4dc\uc640 \uba40\uc6e8\uc5b4 \ubd84\uc11d – 1\uc7a5 \uae30\ucd08 \uc815\uc801\ubd84\uc11d \uc2e4\uc2b5 1-3<\/a>
\n\uc2e4\uc804 \uc545\uc131\ucf54\ub4dc\uc640 \uba40\uc6e8\uc5b4 \ubd84\uc11d – 1\uc7a5 \uae30\ucd08 \uc815\uc801\ubd84\uc11d \uc2e4\uc2b5 1-4<\/a>
\n\uc2e4\uc804 \uc545\uc131\ucf54\ub4dc\uc640 \uba40\uc6e8\uc5b4 \ubd84\uc11d – 3\uc7a5 \uae30\ucd08 \ub3d9\uc801 \ubd84\uc11d \uc2e4\uc2b5 3-1<\/a>
\n\uc2e4\uc804 \uc545\uc131\ucf54\ub4dc\uc640 \uba40\uc6e8\uc5b4 \ubd84\uc11d – 3\uc7a5 \uae30\ucd08 \ub3d9\uc801 \ubd84\uc11d \uc2e4\uc2b5 3-2<\/a>
\n\uc2e4\uc804 \uc545\uc131\ucf54\ub4dc\uc640 \uba40\uc6e8\uc5b4 \ubd84\uc11d – 3\uc7a5 \uae30\ucd08 \ub3d9\uc801 \ubd84\uc11d \uc2e4\uc2b5 3-3<\/a>
\n\uc2e4\uc804 \uc545\uc131\ucf54\ub4dc\uc640 \uba40\uc6e8\uc5b4 \ubd84\uc11d – 3\uc7a5 \uae30\ucd08 \ub3d9\uc801 \ubd84\uc11d \uc2e4\uc2b5 3-4<\/a><\/p>\n

\uc2e4\uc2b5\ubb38\uc81c \ub2e4\uc6b4\ub85c\ub4dc \ubc1b\ub294 \uacf3 : http:\/\/nostarch.com\/malware<\/a><\/p>\n

\uc2e4\uc2b5 1-2
\nLab01-02.exe \ud30c\uc77c\uc744 \ubd84\uc11d\ud558\ub77c.<\/p>\n

\uc9c8\ubb38
\n1. http:\/\/www.virustotal.com \uc5d0 \ud30c\uc77c\uc744 \uc5c5\ub85c\ub4dc\ud558\uc790. \uae30\uc874 \uc548\ud2f0\ubc14\uc774\ub7ec\uc2a4\uc5d0 \uc815\uc758\ub41c \uac83\uacfc \uc77c\uce58\ud558\ub294\uac00?
\nA : 18\uac1c\uc758 \ubc31\uc2e0\uc5d0\uc11c \uc545\uc131\ucf54\ub4dc\ub85c \ud0d0\uc9c0\ub418\uc5c8\ub2e4.
\n\"1-2-1\"<\/p>\n

2. \uc774 \ud30c\uc77c\uc774 \ud328\ud0b9\ub418\uac70\ub098 \ub09c\ub3c5\ud654\ub41c \uc9d5\ud6c4\uac00 \uc788\ub294\uac00? \uadf8\ub807\ub2e4\uba74 \ubb34\uc5c7\uc73c\ub85c \ud310\ub2e8\ud588\ub294\uac00? \ud30c\uc77c\uc774 \ud328\ud0b9\ub418\uc5b4 \uc788\ub2e4\uba74 \uc5b8\ud328\ud0b9 \ud574\ubcf4\uc790.
\nA : UPX\uc73c\ub85c \ud328\ud0b9\ub418\uc5b4\uc788\ub2e4.
\n\"1-2-2\"<\/p>\n

UPX unpack \ud574\ubcf4\uc558\ub2e4 (upx.exe -d Lab01-02.exe)
\n\"1-2-3\"<\/p>\n

unpack \ud6c4\uc5d0 \ub2e4\uc2dc PEiD\uc73c\ub85c \ud655\uc778.
\n\"1-2-4\"<\/p>\n

3. \uc784\ud3ec\ud2b8\ub97c \ubcf4\uace0 \uc545\uc131\ucf54\ub4dc \uae30\ub2a5\ub97c \uc54c\uc544\ub0bc \uc218 \uc788\ub294\uac00? \uadf8\ub807\ub2e4\uba74 \uc5b4\ub5a4 \uc784\ud3ec\ud2b8\ub97c \ubcf4\uace0 \uc54c \uc218 \uc788\uc5c8\ub294\uac00?
\nA : ADVAPI32.DLL \uc5d0\uc11c \uc11c\ube44\uc2a4\uad00\ub828 API(CreateServiceA, StartServiceCtrlDispatcherA, OpenSCManagerA)\ub97c \ubcfc \uc218 \uc788\uc5c8\uace0, WININET.DLL\uc5d0\uc11c \uc778\ud130\ub137 \uad00\ub828 API(InternetOpenUrlA, InternetOpenA)\ub97c \ubcfc \uc218 \uc788\uc5c8\ub2e4.
\n\"1-2-5\"<\/p>\n

4. \uac10\uc5fc\ub41c \uc2dc\uc2a4\ud15c\uc5d0\uc11c \uc545\uc131\ucf54\ub4dc\ub97c \uc778\uc2dd\ud558\ub294\ub370 \uc5b4\ub5a4 \ud638\uc2a4\ud2b8 \uae30\ubc18\uc774\ub098 \ub124\ud06c\uc6cc\ud06c \uae30\ubc18\uc758 \uc99d\uac70\ub97c \uc0ac\uc6a9\ud588\ub294\uac00?
\nA : Lab01-02.exe\uc744 strings \uc73c\ub85c \ud655\uc778\ud574\ubd24\uc744 \ub54c \uc544\ub798\uc640 \uac19\uc774 URL(http:\/\/www.malwareanalysisbook.com)\uc744 \ubc1c\uacac\ud560 \uc218 \uc788\uc5c8\uace0, MalService, HGL345, Internet Explorer 8.0 \ub4f1\uc758 \ubb38\uc790\ub97c \ud655\uc778\ud560\uc218 \uc788\uc5c8\ub2e4.<\/p>\n

D:\\DATA\\...\\Chapter_1L>strings Lab01-02-unpack.exe\r\n\r\nStrings v2.51\r\nCopyright (C) 1999-2013 Mark Russinovich\r\nSysinternals - www.sysinternals.com\r\n\r\n!This program cannot be run in DOS mode.\r\n...\r\nKERNEL32.DLL\r\nADVAPI32.dll\r\nMSVCRT.dll\r\nWININET.dll\r\nSystemTimeToFileTime\r\nGetModuleFileNameA\r\nCreateWaitableTimerA\r\nExitProcess\r\nOpenMutexA\r\nSetWaitableTimer\r\nWaitForSingleObject\r\nCreateMutexA\r\nCreateThread\r\nCreateServiceA\r\nStartServiceCtrlDispatcherA\r\nOpenSCManagerA\r\n_exit\r\n_XcptFilter\r\nexit\r\n__p___initenv\r\n__getmainargs\r\n_initterm\r\n__setusermatherr\r\n_adjust_fdiv\r\n__p__commode\r\n__p__fmode\r\n__set_app_type\r\n_except_handler3\r\n_controlfp\r\nInternetOpenUrlA\r\nInternetOpenA\r\nMalService\r\nMalservice\r\nHGL345\r\nhttp:\/\/www.malwareanalysisbook.com\r\nInternet Explorer 8.0\r\n\r\nD:\\DATA\\...\\Chapter_1L><\/pre>\n
 <\/p>\n","protected":false},"excerpt":{"rendered":"
  Notice : \ud574\ub2f9 \uc790\ub8cc\uac00 \uc800\uc791\uad8c\ub4f1\uc5d0 \uc758\ud574\uc11c \ubb38\uc81c\uac00 \uc788\ub2e4\uba74 \ubc14\ub85c \uc0ad\uc81c\ud558\uaca0\uc2b5\ub2c8\ub2e4. \uc5f0\uad6c\ubaa9\uc801\uc73c\ub85c \uc0ac\uc6a9\ud558\uc9c0 \uc54a\uace0 \uc545\uc758\uc801\uc778 \ubaa9\uc801\uc73c\ub85c \uc774\uc6a9\ud560 \uacbd\uc6b0 \ubc1c\uc0dd\ud560 \uc218 \uc788\ub294 \ubc95\uc801\uc740 \ucc45\uc784\uc740 \ubaa8\ub450 \ubcf8\uc778\uc5d0\uac8c \uc788\uc2b5\ub2c8\ub2e4. [\uad6c\ub9e4\ud558\uae30] \uc2e4\uc804 \uc545\uc131\ucf54\ub4dc\uc640 \uba40\uc6e8\uc5b4 \ubd84\uc11d – 1\uc7a5 \uae30\ucd08 \uc815\uc801\ubd84\uc11d \uc2e4\uc2b5 1-1 \uc2e4\uc804 \uc545\uc131\ucf54\ub4dc\uc640 \uba40\uc6e8\uc5b4 … Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[658,1266],"tags":[1265,236],"class_list":["post-4349","post","type-post","status-publish","format-standard","hentry","category-book-2","category-reversing","tag-malware-analysis","tag-236"],"yoast_head":"\n\uc2e4\uc804 \uc545\uc131\ucf54\ub4dc\uc640 \uba40\uc6e8\uc5b4 \ubd84\uc11d - 1\uc7a5 \uae30\ucd08 \uc815\uc801\ubd84\uc11d \uc2e4\uc2b5 1-2 - Apollo89.com<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/apollo89.com\/wordpress\/?p=4349\" \/>\n<meta property=\"og:locale\" content=\"ko_KR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"\uc2e4\uc804 \uc545\uc131\ucf54\ub4dc\uc640 \uba40\uc6e8\uc5b4 \ubd84\uc11d - 1\uc7a5 \uae30\ucd08 \uc815\uc801\ubd84\uc11d \uc2e4\uc2b5 1-2 - Apollo89.com\" \/>\n<meta property=\"og:description\" content=\"  Notice : \ud574\ub2f9 \uc790\ub8cc\uac00 \uc800\uc791\uad8c\ub4f1\uc5d0 \uc758\ud574\uc11c \ubb38\uc81c\uac00 \uc788\ub2e4\uba74 \ubc14\ub85c \uc0ad\uc81c\ud558\uaca0\uc2b5\ub2c8\ub2e4. \uc5f0\uad6c\ubaa9\uc801\uc73c\ub85c \uc0ac\uc6a9\ud558\uc9c0 \uc54a\uace0 \uc545\uc758\uc801\uc778 \ubaa9\uc801\uc73c\ub85c \uc774\uc6a9\ud560 \uacbd\uc6b0 \ubc1c\uc0dd\ud560 \uc218 \uc788\ub294 \ubc95\uc801\uc740 \ucc45\uc784\uc740 \ubaa8\ub450 \ubcf8\uc778\uc5d0\uac8c \uc788\uc2b5\ub2c8\ub2e4. [\uad6c\ub9e4\ud558\uae30] \uc2e4\uc804 \uc545\uc131\ucf54\ub4dc\uc640 \uba40\uc6e8\uc5b4 \ubd84\uc11d – 1\uc7a5 \uae30\ucd08 \uc815\uc801\ubd84\uc11d \uc2e4\uc2b5 1-1 \uc2e4\uc804 \uc545\uc131\ucf54\ub4dc\uc640 \uba40\uc6e8\uc5b4 … Continue reading →\" \/>\n<meta property=\"og:url\" content=\"https:\/\/apollo89.com\/wordpress\/?p=4349\" \/>\n<meta property=\"og:site_name\" content=\"Apollo89.com\" \/>\n<meta property=\"article:published_time\" content=\"2013-11-20T13:51:41+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2013-12-11T13:57:19+00:00\" \/>\n<meta property=\"og:image\" content=\"http:\/\/apollo89.com\/wordpress\/wp-content\/uploads\/2013\/11\/Practical_Malware_Analysis.jpg\" \/>\n<meta name=\"author\" content=\"apollo89\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\uae00\uc4f4\uc774\" \/>\n\t<meta name=\"twitter:data1\" content=\"apollo89\" \/>\n\t<meta name=\"twitter:label2\" content=\"\uc608\uc0c1 \ub418\ub294 \ud310\ub3c5 \uc2dc\uac04\" \/>\n\t<meta name=\"twitter:data2\" content=\"1\ubd84\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/?p=4349#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/?p=4349\"},\"author\":{\"name\":\"apollo89\",\"@id\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/#\\\/schema\\\/person\\\/93f56825cac3b2f18e5f107995066c82\"},\"headline\":\"\uc2e4\uc804 \uc545\uc131\ucf54\ub4dc\uc640 \uba40\uc6e8\uc5b4 \ubd84\uc11d – 1\uc7a5 \uae30\ucd08 \uc815\uc801\ubd84\uc11d \uc2e4\uc2b5 1-2\",\"datePublished\":\"2013-11-20T13:51:41+00:00\",\"dateModified\":\"2013-12-11T13:57:19+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/?p=4349\"},\"wordCount\":72,\"commentCount\":3,\"image\":{\"@id\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/?p=4349#primaryimage\"},\"thumbnailUrl\":\"http:\\\/\\\/apollo89.com\\\/wordpress\\\/wp-content\\\/uploads\\\/2013\\\/11\\\/Practical_Malware_Analysis.jpg\",\"keywords\":[\"Malware Analysis\",\"\ub3c5\uc11c\"],\"articleSection\":[\"Reading\",\"Reversing\"],\"inLanguage\":\"ko-KR\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/?p=4349#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/?p=4349\",\"url\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/?p=4349\",\"name\":\"\uc2e4\uc804 \uc545\uc131\ucf54\ub4dc\uc640 \uba40\uc6e8\uc5b4 \ubd84\uc11d - 1\uc7a5 \uae30\ucd08 \uc815\uc801\ubd84\uc11d \uc2e4\uc2b5 1-2 - Apollo89.com\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/?p=4349#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/?p=4349#primaryimage\"},\"thumbnailUrl\":\"http:\\\/\\\/apollo89.com\\\/wordpress\\\/wp-content\\\/uploads\\\/2013\\\/11\\\/Practical_Malware_Analysis.jpg\",\"datePublished\":\"2013-11-20T13:51:41+00:00\",\"dateModified\":\"2013-12-11T13:57:19+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/#\\\/schema\\\/person\\\/93f56825cac3b2f18e5f107995066c82\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/?p=4349#breadcrumb\"},\"inLanguage\":\"ko-KR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/?p=4349\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"ko-KR\",\"@id\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/?p=4349#primaryimage\",\"url\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/wp-content\\\/uploads\\\/2013\\\/11\\\/Practical_Malware_Analysis.jpg\",\"contentUrl\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/wp-content\\\/uploads\\\/2013\\\/11\\\/Practical_Malware_Analysis.jpg\",\"width\":301,\"height\":400},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/?p=4349#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\ud648\",\"item\":\"https:\\\/\\\/apollo89.com\\\/wordpress\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"\uc2e4\uc804 \uc545\uc131\ucf54\ub4dc\uc640 \uba40\uc6e8\uc5b4 \ubd84\uc11d – 1\uc7a5 \uae30\ucd08 \uc815\uc801\ubd84\uc11d \uc2e4\uc2b5 1-2\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/#website\",\"url\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/\",\"name\":\"Apollo89.com\",\"description\":\"\uc544\ud3f4\ub85c\uc528\uc758 \uc7a1\ub2e4\ud55c \uacbd\ud5d8\ub4e4..\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"ko-KR\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/#\\\/schema\\\/person\\\/93f56825cac3b2f18e5f107995066c82\",\"name\":\"apollo89\",\"description\":\"\uc544\ud3f4\ub85c89 \uc785\ub2c8\ub2e4.\",\"url\":\"https:\\\/\\\/apollo89.com\\\/wordpress\\\/?author=1\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"\uc2e4\uc804 \uc545\uc131\ucf54\ub4dc\uc640 \uba40\uc6e8\uc5b4 \ubd84\uc11d - 1\uc7a5 \uae30\ucd08 \uc815\uc801\ubd84\uc11d \uc2e4\uc2b5 1-2 - Apollo89.com","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/apollo89.com\/wordpress\/?p=4349","og_locale":"ko_KR","og_type":"article","og_title":"\uc2e4\uc804 \uc545\uc131\ucf54\ub4dc\uc640 \uba40\uc6e8\uc5b4 \ubd84\uc11d - 1\uc7a5 \uae30\ucd08 \uc815\uc801\ubd84\uc11d \uc2e4\uc2b5 1-2 - Apollo89.com","og_description":"  Notice : \ud574\ub2f9 \uc790\ub8cc\uac00 \uc800\uc791\uad8c\ub4f1\uc5d0 \uc758\ud574\uc11c \ubb38\uc81c\uac00 \uc788\ub2e4\uba74 \ubc14\ub85c \uc0ad\uc81c\ud558\uaca0\uc2b5\ub2c8\ub2e4. \uc5f0\uad6c\ubaa9\uc801\uc73c\ub85c \uc0ac\uc6a9\ud558\uc9c0 \uc54a\uace0 \uc545\uc758\uc801\uc778 \ubaa9\uc801\uc73c\ub85c \uc774\uc6a9\ud560 \uacbd\uc6b0 \ubc1c\uc0dd\ud560 \uc218 \uc788\ub294 \ubc95\uc801\uc740 \ucc45\uc784\uc740 \ubaa8\ub450 \ubcf8\uc778\uc5d0\uac8c \uc788\uc2b5\ub2c8\ub2e4. [\uad6c\ub9e4\ud558\uae30] \uc2e4\uc804 \uc545\uc131\ucf54\ub4dc\uc640 \uba40\uc6e8\uc5b4 \ubd84\uc11d – 1\uc7a5 \uae30\ucd08 \uc815\uc801\ubd84\uc11d \uc2e4\uc2b5 1-1 \uc2e4\uc804 \uc545\uc131\ucf54\ub4dc\uc640 \uba40\uc6e8\uc5b4 … Continue reading →","og_url":"https:\/\/apollo89.com\/wordpress\/?p=4349","og_site_name":"Apollo89.com","article_published_time":"2013-11-20T13:51:41+00:00","article_modified_time":"2013-12-11T13:57:19+00:00","og_image":[{"url":"http:\/\/apollo89.com\/wordpress\/wp-content\/uploads\/2013\/11\/Practical_Malware_Analysis.jpg","type":"","width":"","height":""}],"author":"apollo89","twitter_card":"summary_large_image","twitter_misc":{"\uae00\uc4f4\uc774":"apollo89","\uc608\uc0c1 \ub418\ub294 \ud310\ub3c5 \uc2dc\uac04":"1\ubd84"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/apollo89.com\/wordpress\/?p=4349#article","isPartOf":{"@id":"https:\/\/apollo89.com\/wordpress\/?p=4349"},"author":{"name":"apollo89","@id":"https:\/\/apollo89.com\/wordpress\/#\/schema\/person\/93f56825cac3b2f18e5f107995066c82"},"headline":"\uc2e4\uc804 \uc545\uc131\ucf54\ub4dc\uc640 \uba40\uc6e8\uc5b4 \ubd84\uc11d – 1\uc7a5 \uae30\ucd08 \uc815\uc801\ubd84\uc11d \uc2e4\uc2b5 1-2","datePublished":"2013-11-20T13:51:41+00:00","dateModified":"2013-12-11T13:57:19+00:00","mainEntityOfPage":{"@id":"https:\/\/apollo89.com\/wordpress\/?p=4349"},"wordCount":72,"commentCount":3,"image":{"@id":"https:\/\/apollo89.com\/wordpress\/?p=4349#primaryimage"},"thumbnailUrl":"http:\/\/apollo89.com\/wordpress\/wp-content\/uploads\/2013\/11\/Practical_Malware_Analysis.jpg","keywords":["Malware Analysis","\ub3c5\uc11c"],"articleSection":["Reading","Reversing"],"inLanguage":"ko-KR","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/apollo89.com\/wordpress\/?p=4349#respond"]}]},{"@type":"WebPage","@id":"https:\/\/apollo89.com\/wordpress\/?p=4349","url":"https:\/\/apollo89.com\/wordpress\/?p=4349","name":"\uc2e4\uc804 \uc545\uc131\ucf54\ub4dc\uc640 \uba40\uc6e8\uc5b4 \ubd84\uc11d - 1\uc7a5 \uae30\ucd08 \uc815\uc801\ubd84\uc11d \uc2e4\uc2b5 1-2 - Apollo89.com","isPartOf":{"@id":"https:\/\/apollo89.com\/wordpress\/#website"},"primaryImageOfPage":{"@id":"https:\/\/apollo89.com\/wordpress\/?p=4349#primaryimage"},"image":{"@id":"https:\/\/apollo89.com\/wordpress\/?p=4349#primaryimage"},"thumbnailUrl":"http:\/\/apollo89.com\/wordpress\/wp-content\/uploads\/2013\/11\/Practical_Malware_Analysis.jpg","datePublished":"2013-11-20T13:51:41+00:00","dateModified":"2013-12-11T13:57:19+00:00","author":{"@id":"https:\/\/apollo89.com\/wordpress\/#\/schema\/person\/93f56825cac3b2f18e5f107995066c82"},"breadcrumb":{"@id":"https:\/\/apollo89.com\/wordpress\/?p=4349#breadcrumb"},"inLanguage":"ko-KR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/apollo89.com\/wordpress\/?p=4349"]}]},{"@type":"ImageObject","inLanguage":"ko-KR","@id":"https:\/\/apollo89.com\/wordpress\/?p=4349#primaryimage","url":"https:\/\/apollo89.com\/wordpress\/wp-content\/uploads\/2013\/11\/Practical_Malware_Analysis.jpg","contentUrl":"https:\/\/apollo89.com\/wordpress\/wp-content\/uploads\/2013\/11\/Practical_Malware_Analysis.jpg","width":301,"height":400},{"@type":"BreadcrumbList","@id":"https:\/\/apollo89.com\/wordpress\/?p=4349#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\ud648","item":"https:\/\/apollo89.com\/wordpress"},{"@type":"ListItem","position":2,"name":"\uc2e4\uc804 \uc545\uc131\ucf54\ub4dc\uc640 \uba40\uc6e8\uc5b4 \ubd84\uc11d – 1\uc7a5 \uae30\ucd08 \uc815\uc801\ubd84\uc11d \uc2e4\uc2b5 1-2"}]},{"@type":"WebSite","@id":"https:\/\/apollo89.com\/wordpress\/#website","url":"https:\/\/apollo89.com\/wordpress\/","name":"Apollo89.com","description":"\uc544\ud3f4\ub85c\uc528\uc758 \uc7a1\ub2e4\ud55c \uacbd\ud5d8\ub4e4..","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/apollo89.com\/wordpress\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"ko-KR"},{"@type":"Person","@id":"https:\/\/apollo89.com\/wordpress\/#\/schema\/person\/93f56825cac3b2f18e5f107995066c82","name":"apollo89","description":"\uc544\ud3f4\ub85c89 \uc785\ub2c8\ub2e4.","url":"https:\/\/apollo89.com\/wordpress\/?author=1"}]}},"_links":{"self":[{"href":"https:\/\/apollo89.com\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/4349","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/apollo89.com\/wordpress\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/apollo89.com\/wordpress\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/apollo89.com\/wordpress\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/apollo89.com\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=4349"}],"version-history":[{"count":0,"href":"https:\/\/apollo89.com\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/4349\/revisions"}],"wp:attachment":[{"href":"https:\/\/apollo89.com\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=4349"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/apollo89.com\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=4349"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/apollo89.com\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=4349"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}