Malware Development: Processes, Threads, and Handles

#Malware #Development #redteam

Thank you, guys, SO MUCH for bearing with the time that it took to get this video out, during the recording/editing of this video, my AIO cooler actually broke so I had to risk my CPU's health (pretty sure it's irrevocably destroyed at this point but, the show must go on) to get this video out. Also, thank you guys so much for getting the channel to 1,000+ subscribers! That's just horrifying (and insanely exciting) to me, and I'm currently working on a Q&A special for it! Stay tuned :"D

I love you guys, enjoy.

⚠️ Disclaimer:
The information presented in this video is for educational purposes only. It is not intended to be used for illegal or malicious activities. The creator and any individuals involved in the production of this video are not responsible for any misuse of the information provided. It is the responsibility of the viewer to ensure that they comply with all relevant laws and regulations in their jurisdiction.

🔖 My Socials:

💖 Support My Work
Join this channel to get access to perks:

📹 Videos/Channels Featured:

❤️ Websites Featured:

The images and music used in this video are used under the principle of fair use for the purpose of criticism, comment, news reporting, teaching, scholarship, and research. I do not claim ownership of any of the images/music and they are used solely for the purpose of enhancing the content of the video. I respect the rights of the creators and owners of these images and will remove any image upon request by the rightful owner.

Copyright Disclaimer under section 107 of the Copyright Act of 1976, allowance is made for “fair use” for purposes such as criticism, comment, news reporting, teaching, scholarship, education, and research. Fair use is a use permitted by copyright statute that might otherwise be infringing.

🕰️ Timestamps:
00:00 - Intro
00:43 - Malware Development Series
01:24 - Prerequisites
02:43 - Processes
08:09 - Threads
10:12 - Handles
11:39 - Windows API
13:39 - Windows API: MessageBox
22:33 - Windows API: CreateProcess
30:30 - Homework
31:02 - Outro

[crrww]

*CORRECTIONS/UPDATES/ETC.*

THEME: Mayukai Reversal
FONT: Iosevka (not in the video, but I'm using it now, and trust me, you'll love it)
TYPING EFFECTS/ANIMATIONS: "Power Mode" from Visual Studio Marketplace

16:12 - I misspoke here, didn't mean to say "scripts." I meant "programs." Sorry about that! My brain was going through a segfault while making this video, so please pardon me if I say something stupid (still learning here as well :')).

20:34 - Once again, I misspoke here, I meant to say "L prefix" instead of "L macro", since "a character literal that begins with the L prefix is a wide-character literal".

21:19 - So, the MessageBox macro itself is set to MessageBoxW in the Win API, and it doesn't matter which compiler/ide you are using. When you use the MessageBox macro, the preprocessor will use either MessageBoxW or MessageBoxA, depending on the presence/absence of the *UNICODE/_UNICODE* preprocessor symbols. By default, in Visual Studio, new projects have UNICODE/_UNICODE defined so the MessageBox macro expands out to the MessageBoxW example we saw in the video. Thanks, @proferk! :)

25:42 - While this was true for Windows 10, in Windows 11, "MSPaint" has become a "Universal Windows Platform (UWP) app" and so, the location of this file is different. However, you could get the classic paint back with some tinkering, if you search for it. Thank you once again, @proferk!

I'll be sure to add more as I come across them, thank you guys for bearing with me!

[whoopsimsorry]

This windows malware development tutorial was approved by the Linux Community! Keep it up!

[avananana]

I remember getting into C/C++ development and struggling with how complicated the windows API is. Glad to see nothing has changed.

[peppidesu]

5:50 Hi, uni kiddo here. Your CPU can only do up to <core count> number of things at once. To give the illusion it can do more than that, it has what is called a "scheduler", which keeps track of the gazillion things your cpu should take care of and puts them in a nice ordered queue. *If you assign a higher priority to a process, the scheduler will allow that process to skip the queue and be executed sooner when other processes take too long* .

Edit: i didn't expect you to go more in-depth on this specific topic, good job.

[blurredyt]

Thank you yt algorithm for working properly for once and showing me this channel

[גיאבןאליהו-טת]

The amount of work that is being put into these videos is unbelievable. The explanations and overall script of the video is super fun and engaging!!

[areeburrehmankhan]

I just accidentally stumbled across this channel. Thanks to the algorithm gods. And by God this is the longest I have been indulged So much in a video. The way you simplified things for a beginner like me made me so much more interested that I also went to read more about the process and threads. Thanks man.❤

[carn]

Just started doing cybersecurity at university but it doesn't involve actual malware development, just theory. So glad I found this channel, full of great content.

[Noobificado]

This is stuff that I already knew, but this video delivers the knowledge way faster that the few weeks it took me to learn this on my own.
Very interested in what is to come.

[khaelkugler]

I love your editing style - made the content so easy to consume

[lonelybiscuit]

This is some S Tier cybersecurity content you have! There aren't much channels out there to learn the craft but yours made it quickly to the top off my list

[kipchickensout]

Extra fun fact, the guy that originally made the task manager has a YouTube channel called "Dave's Garage", that also has lots of interesting stuff to learn

[alec]

This is so freaking cool, I've waited waaay too long for a channel who does content like this and shows it in an entertaining way, peace my dude

[Momoyon]

Damn did I just found a coding youtuber that goes into depth and explains things throughly? AND FUNNY ASWELL??? Subbed. Looking forward to the next video! Now I'll go and binge watch all of your previous videos :)

[randomxaos]

This is how all info vids should be made.. AWESOME. In other words: FAST concise, references....comparisons+

[xlich]

This is one of the best video tutorials on this subject that I've seen so far. It's good, concise, goes to the point, entertaining and actually a break from the more motonous security focused tutorials. Keep up the good work, waiting for the next video.

[nightlockhayze]

Crow the editing is so good 😭😭😭

Video's fire like always 🔥🔥🔥🔥

[red_noise_bomb]

I'm so glad I bumped into this video after having learned concurrent systems and microprocessor programming at college, so I can actually understand everything you are teaching us here. Keep this up! The blog is also extremely well written!

[coder_rc]

Although I understand all the concepts, I really enjoyed the way you described everything and with detail. Please continue ✅

[manfrombritain]

this is the new way that education should/will be done. it's impossible to sit through 20-30 minutes of dry educational video but stuff like this and what patrick collins does is great