Index of Reverse Challenge Submission

Contents:

• index.html - this file

• timestamp.html - Timestamp of MD5 checksums of all files listed and submitted

• summary.html - Summary for a non-technical audience

• advisory.html - Advisory for a technical audience

• analysis.html - Reverse engineering analysis of the binary

• answers.html - Answers to the challenge questions

• costs.html - Incident cost estimate

• files.tar - A collection of all files not listed above

• Documentation of the the communications that activate the various features of the-binary
• command1.html
• command2.html
• command3.html
• command4.html
• command5.html
• command6.html
• command7.html
• command8.html
• command10.html
• command12.html
• Other files
• the-binaryStrings.txt - strings output for the-binary
• email.jpg - Name and email as a jpeg
• ddos.jpg - A graphic of a typical DDoS network
• ida.jpg - small screen capture from IDA Pro
• the-binary.idb - IDA Pro database file for analysis of the-binary

 
• Source Code
• Makefile - Makefile for the four programs below.
• the-binary.c - C source for a functional equivalent of the-binary, a result of the reverse engineering process
• dnsservers.c - DNS server data for the-binary.
• scanner.c - A tool to scan a network for live instances of the-binary
• decoder.c - A tool to decode agent-handler data streams on a compromised network (requires libpcap)
• killer.c - A tool to identify the file name of the agent and kill it on an infected host