CS6038 2020: Week 5 Lecture 1 - Using DLL import breadcrumb to navigate in Ghidra
Channel: Coleman Kane
Date: 2020-02-12

https://class.malware.re/2020/02/11/continued-analysis-ghidra.html


Continue analysis in Ghidra by reviewing one of the objectives for Week 4's lab assignment. Use the knowledge of a code change that calls the MessageBoxA Win32 API function to navigate code and identify what function calls it and what that function is trying to display to the screen, without running the program in a VM.