Advanced Malware Analysis: Redux

Course details

Do you have knowledge of malware analysis core concepts, but want to transition from malware analyst to reverse engineer? Brian Rogalski, CEO of Hexcapes, equips you to handle complex tasks such as extracting, debugging, disassembling, unpacking, and hunting malware as he reacquaints you with key analysis topics and exercises. Get ready for the rest of the course with a review of Windows OS, PE files and memory, WinAPI and Registry, and common malware behaviors. Go over x86 and x64 architecture, and then dive into dynamic and static malware analysis. Explore malware challenges, including malware packers, obfuscation, identifying encryption, anti-analysis, and memory analysis. This course helps you gain the hands-on experience you need to level up.

Concepts

1. RE Preparation

01 - Module 1 objectives
02 - Reverse engineering process review
03 - Malware analysis tools
04 - Malware handling
05 - Malware components part 1 - Windows OS
06 - Malware components part 2 - PE files and memory
07 - Malware components part 3 - WinAPI and Registry
08 - Malware components part 4 - Malware behaviors
09 - Module 1 summary

2. x86 and x64 Architecture

10 - Module 2 objectives
11 - Numbering systems
12 - Computer architecture part 1 - x86 x64
13 - Computer architecture part 2 - Assembly Language
14 - Computer architecture part 3 - Control flow and stack
15 - Module 2 summary

3. Dynamic and Static Malware Analysis

16 - Module 3 objectives
17 - Dynamic analysis process part 1
18 - Dynamic analysis process part 2
19 - Dynamic analysis process part 3 - Advanced analysis
20 - Static analysis part 1
21 - Static analysis part 2
22 - Module 3 summary

4. Malware Challenges

23 - Module 4 objectives
24 - Malware packers part 1
25 - Malware packers part 2
26 - Obfuscation part 1
27 - Obfuscation part 2 - XOR
28 - Obfuscation part 3 - base64
29 - Identifying encryption
30 - Anti-analysis part 1
31 - Anti-analysis part 2
32 - Module 4 summary

5. Memory Analysis

33 - Module 5 objectives
34 - Forensics process
35 - Memory analysis part 1
36 - Memory analysis part 2
37 - Module 5 summary
38 - Course summary

Advanced Malware Analysis: Redux

Authors

Cybrary