Tatakae

MediumMalware Reverse Engineering

Overview

A stripped .NET Native binary takes user input, transforms it through a custom multi-stage encryption routine, and stores the result in a separate file. With most metadata removed and strings resolved dynamically, traditional .NET reversing techniques will only get you so far. Recover the hidden logic by analyzing native AOT internals, tracking functions against known binaries, and reconstructing the encryption flow to reveal the original message. Familiarity with x64 reversing, ReadyToRun structures, binary diffing, and PRNG behavior will be essential.

flag format: flag{******_*********_**_**********}

Job Positions

Malware Analyst

Tags

GhidraDotnetStatic AnalysisMalware AnalysisDisassemblerPrng Weakness