Basic Introduction to Malware Analysis

Perform static malware analysis using peace studio in a demo, dragging an executable to analyze indicators like a key logger, blacklisted libraries, and strings, and assess severity and references.

Analyze malware behavior through dynamic analysis in an isolated environment, balancing realism with safety to observe system and network changes on a Windows 8 virtual machine.

Analyze network-based behavior by inspecting inbound and outbound flows to detect malware indicators, such as malicious servers or IPs, and data sent or requested, using Wireshark and Microsoft Network Analyzer.

Demonstrate network based malware analysis using three tools—Wireshark, Fiddler, and a third proxy—capture and filter traffic, decrypt with a certificate, and trace DNS queries.

Explore code based analysis for malware, linking behavior to assembly and machine code. Learn debugging techniques and observe disassembled code, memory, and breakpoints to reveal software intent.

Conduct a code-based, dynamic analysis of messenger software in a secure VM, tracing strings, memory maps, and breakpoints to reveal parameters, password-like sequences, and data flows.