--- title: ' TryHackMe — Basic Malware RE Writeup' --- # TryHackMe — Basic Malware RE Writeup Welcome to my blog! In this writeup, I will explain the approach I followed to solve this challenge. <div class="two-column-layout"> ### Challenge Link : https://tryhackme.com/r/room/basicmalwarere ### `Tools:` - IDA Free - Ghidra - Strings </div> ## <div class="two-column-layout"> ### Strings :: Challenge 1 **What is the flag of which that MD5 gets generated?** *Steps:* 1. I initially used the `strings` command, but it produced a lot of potential flags. 2. After that, I used `IDA Free` to perform static analysis on the code. *Answer:* ![1](https://hackmd.io/_uploads/HJy96TM2R.png) ### Strings :: Challenge 2 ****What is the flag of which that MD5 gets generated?**** I solved this task using the same steps that I used to solve Challenge 1. *Answer:* ![2](https://hackmd.io/_uploads/BJrWA6MnC.png) ### Strings :: Challenge 3 ****What is the flag of which that MD5 gets generated?**** To solve this challenge, I used `Ghidra`. After uploading the executable file to Ghidra, I navigated through the headers and sections and found a part of the flag. ![22](https://hackmd.io/_uploads/BJBxlCf2R.png) After that, I took this part of the flag and searched for it in the '`Program Text`' tab ![33](https://hackmd.io/_uploads/H1uGe0z3A.png) ![Annotation 2024-09-02 057600819](https://hackmd.io/_uploads/SkK4lCf3R.png) *Answer:* ![55](https://hackmd.io/_uploads/Bkbwl0fhC.png) </div> # Finally🥳 I hope my approach has been helpful to you.