Amanda Rousseau

@malwareunicorn

Malware Research Unicorn . Interested in Malware, Reverse Engineering, and Fashion. DEF CON. My thoughts are my own. Creator

San Francisco, CA
securedorg.github.io
Joined February 2014
848 Photos and videos Photos and videos

Tweets

You blocked @malwareunicorn

Are you sure you want to view these Tweets? Viewing Tweets won't unblock @malwareunicorn

  1. Pinned Tweet
    May 8

    Ahhhhh! Our talk "FINDING XORI: MALWARE ANALYSIS TRIAGE WITH AUTOMATED DISASSEMBLY" got accepted at !

    38 replies 63 retweets 434 likes
    Undo
  2. 8 hours ago

    There is always a pet conference the same time as in vegas. If they can just combine ...

    10 replies 3 retweets 62 likes
    Undo
  3. 8 hours ago

    Hey girl, you are just like a *pointer, something I would only dereference, but never devalue ;)

    5 replies 15 retweets 114 likes
    Undo
  4. 9 hours ago

    Better yet, why aren't there booth puppies?

    43 replies 19 retweets 306 likes
    Show this thread
    Show this thread
    Undo
  5. 9 hours ago

    Why aren't there booth dudes?

    63 replies 17 retweets 189 likes
    Show this thread
    Show this thread
    Undo
  6. 10 hours ago

    Also don't assume that someone dressed nicely at a booth is forced to do so. I was wearing prada heels at my company's booth and someone asked me if I was being forced to dress like that. Haha no, I like fancy heels.

    Ethics of having marketing women at InfoSec booths aside. Publicly using the face of a girl from another industry who’s just doing her job, and devaluing her for being a “booth babe” and not a security expert, is no less discriminating and kind of ironic.
    Show this thread
    18 replies 39 retweets 368 likes
    Undo
  7. 12 hours ago

    Just a reminder, new malware is not considered an 0-day.

    29 replies 82 retweets 436 likes
    Undo
  8. 14 hours ago

    Don’t forget your email bro

    Using a phishing kit that is fully made for skids is even can be hard... 😂
    2 replies 4 retweets 58 likes
    Undo
  9. Retweeted
    Apr 22

    contains package which contains . is and loads dll (i.e. p-code).

    2 replies 19 retweets 34 likes
    Undo
  10. Retweeted
    Jun 6

    More CFPs today for - thank you wonderful people! Keep them coming. We would love to see more female submissions this year. If you need some help or assistance please reach out or DM me!

    2 replies 25 retweets 23 likes
    Undo
  11. Jun 7

    Also thank you to for getting me VB6 to play with 👍

    1 retweet 14 likes
    Show this thread
    Show this thread
    Undo
  12. Jun 7

    What Year Is It? VB6 Payload Crypter. It’s a little late since tweeted it, but was a fun one to do with

    5 replies 35 retweets 79 likes
    Show this thread
    Show this thread
    Undo
  13. Retweeted
    Jun 5

    Initialization in Modern C++.

    43 replies 1,953 retweets 4,302 likes
    Undo
  14. Retweeted
    Jun 6

    a couple years ago this kid hate-forked tor to make an "sjw-free version" but he forked the wrong repo then accidentally gave me push access to all his repos.. now he's stolen an APC for a drug-addled joy ride but not before posting this selfie with it

    wutang clan ain’t nothin to fuck wit booiiiiiiii
    56 replies 393 retweets 1,006 likes
    Undo
  15. Retweeted
    Jun 6

    UAC Bypassing Using msdt.exe XML/Execution Via Feature in Msdt - & RawLog - & Video UAC-Bypass

    6 replies 326 retweets 529 likes
    Undo
  16. Retweeted
    Jun 6

    Wrote a new blog post for a tool I'm releasing called BinSequencer - Generates YARA rules from Win PE samples based on opcode abstraction. It was a good excuse to play with a few years ago, maybe someone will find it useful

    2 replies 68 retweets 123 likes
    Undo
  17. Jun 5

    3 replies 55 likes
    Show this thread
    Show this thread
    Undo
  18. Jun 5

    I feel like if you chant "cyber" three times in the bathroom mirror, a tech evangelist will appear behind you.

    Information security professionals, it’s time to embrace our cyber selves.
    27 replies 46 retweets 256 likes
    Show this thread
    Show this thread
    Undo
  19. Jun 5

    I just got these airpods, and I fear that one day I might lose one in the worst possible way: either my puppy eating them or dropping them in the toilet somehow.

    37 replies 5 retweets 150 likes
    Undo
  20. Retweeted
    Jun 5

    Screenshots from the "Master of Forgers", from Nigeria, while working. 😂😂😂 Not seen the final image, but I would be surprised if it was anything not telling it's obviously edited...

    16 replies 58 retweets 118 likes
    Show this thread
    Show this thread
    Undo
  21. Jun 5

    Simple example of a code injection rule similar to the one we use in our VM analysis

    1 reply 4 retweets 19 likes
    Show this thread
    Show this thread
    Undo

@malwareunicorn hasn't Tweeted yet.

Loading seems to be taking a while.

Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.

    You may also like

    ·