Unpacking a Multi-Stage Malware Loader Like a Malware Analyst

A story about an AutoIt loader, two hidden RWX memory regions, and the shellcode that was trying very hard to stay invisible.