Josh StroscheinJan 6, 20211 min readCreating an IDA Python Plugin for Static XOR String DeobfuscationIn this video, we’ll explore a recent XLS document that drops and executes a DLL using RUNDLL32. The DLL is small and only used to...