Analyze malware without running it using Codex and Ghidra
A security researcher used REA, Ghidra and Codex to statically analyze a Windows loader without ever executing it.
Source
@fedelemantuano on X · 2026-10-17
Written in our own words. Credit to the original author. Link checked 2026-10-19.
What they did
A security researcher used REA, Ghidra and Codex to statically analyze a Windows loader without ever executing it.
Result (as claimed)
Found hardcoded servers and in-memory payload loading; the write-up is linked in the post.
Tools they used
Cost: OpenAI Codex: free plan, paid from $8/mo. Checked 2026-10-14.
Set it up
Gather your sources
Collect the papers, notes, links or files you want to work from in one place.
Load them into the tool
Open OpenAI Codex, REA, Ghidra and add your sources. Keep the original files so you can check claims later.
Ask focused questions
Ask for summaries, comparisons or connections with citations to the source passages.
Verify and save
Spot check claims against the sources, then save the output as notes you can reuse.
Copy the full setup prompt
Paste into your agent and it will walk you through the setup, asking before anything that sends, posts or spends.
You are helping me set up this AI use case end to end in Claude Code. Goal: Analyze malware without running it using Codex and Ghidra What the original author did: A security researcher used REA, Ghidra and Codex to statically analyze a Windows loader without ever executing it. Reported result (as claimed by the author): Found hardcoded servers and in-memory payload loading; the write-up is linked in the post. Source: https://x.com/fedelemantuano/status/2111598581421670782 Tools they used: OpenAI Codex, REA, Ghidra Category: Research & learning Please: 1. Ask me 3 short questions about my situation (accounts I have, budget, what I want the output to look like). 2. Propose a step-by-step plan using these tools or cheaper alternatives, with the time and cost of each step. Use official pricing pages; say "check pricing" if unsure. 3. Then do the setup with me one step at a time, waiting for my OK before anything that sends messages, posts publicly, spends money or deletes data. 4. Finish with a checklist to run it again next time.
You are helping me set up this AI use case end to end in Codex. Goal: Analyze malware without running it using Codex and Ghidra What the original author did: A security researcher used REA, Ghidra and Codex to statically analyze a Windows loader without ever executing it. Reported result (as claimed by the author): Found hardcoded servers and in-memory payload loading; the write-up is linked in the post. Source: https://x.com/fedelemantuano/status/2111598581421670782 Tools they used: OpenAI Codex, REA, Ghidra Category: Research & learning Please: 1. Ask me 3 short questions about my situation (accounts I have, budget, what I want the output to look like). 2. Propose a step-by-step plan using these tools or cheaper alternatives, with the time and cost of each step. Use official pricing pages; say "check pricing" if unsure. 3. Then do the setup with me one step at a time, waiting for my OK before anything that sends messages, posts publicly, spends money or deletes data. 4. Finish with a checklist to run it again next time.
You are helping me set up this AI use case end to end in Grok Bot. Goal: Analyze malware without running it using Codex and Ghidra What the original author did: A security researcher used REA, Ghidra and Codex to statically analyze a Windows loader without ever executing it. Reported result (as claimed by the author): Found hardcoded servers and in-memory payload loading; the write-up is linked in the post. Source: https://x.com/fedelemantuano/status/2111598581421670782 Tools they used: OpenAI Codex, REA, Ghidra Category: Research & learning Please: 1. Ask me 3 short questions about my situation (accounts I have, budget, what I want the output to look like). 2. Propose a step-by-step plan using these tools or cheaper alternatives, with the time and cost of each step. Use official pricing pages; say "check pricing" if unsure. 3. Then do the setup with me one step at a time, waiting for my OK before anything that sends messages, posts publicly, spends money or deletes data. 4. Finish with a checklist to run it again next time.
The Daily 5
Get five new use cases tomorrow morning
Free. Real sources. Unsubscribe any time.
Guides for this use case
How to run multiple coding agents together · How to secure vibe-coded apps and agents · How to use AI agents for research and science
Related use cases
Build an interactive 3D electromagnetic induction simulator with Codex
He built a 3D physics simulator with Codex where you drag a magnet, tweak the coil and watch the induced current respond, then open-sourced it for others to fork.
Join an open math research run with Codex or Claude Code
Auto Research tracks community pull requests that improve the key numbers in OpenAI's 2026 math preprints, starting with integer multiplication below n log n. It gives you a copyable prompt to point Codex or Claude Code at the latest bound, test an improvement and submit a reproducible contribution.
Have sub-agents research any idea, check feasibility and build a concept on your own VPS
A developer built an app that takes any idea, researches it, checks feasibility and creates a working concept using several sub-agents, running cheaply on his own VPS with SearXNG search and Codex.
Add research agent skills that stop invented citations and follow journal rules
A team open-sourced more than 280 research agent skills aimed at the ways agents fail at academic work: invented citations, generic writing and ignoring current journal rules. They install with one npx command into Claude Code, Codex, Cursor, Gemini CLI and more.