Protected API Calls and String Constants: Looting Dridex’s Candy Box Malware September 29, 2016 9 min read