Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: IP Address from Hex - SANS Internet Storm Center SANS ISC InfoSec Forums

Watch ISC TV. Great for NOCs, SOCs and Living Rooms:

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
IP Address from Hex
The diary entry "Fileless Malicious PowerShell Sample" ( helped me with some malware I am analyzing however I have gotten to the second part of the post where the embedded code needs to be disassembled to understand what is going on.

The anonymous poster in this entry shared the disassembled code. I have a basic understanding of assembly language but not this level.

Could someone share how you find the IP address from the given line?

0x000000b2 6802000a98 push 0x980a0002--> IP

Thank you

Sign Up for Free or Log In to start participating in the conversation!