Expert Malware Analysis and Reverse Engineering

Name: Expert Malware Analysis and Reverse Engineering
Rating: 3.7 (1209 reviews)

Beginner to Expert series on Malware analysis and reverse engineering concepts.

Created byAbhinav singh

Last updated 5/2020

English

What you'll learn

Understand cyber kill chain and how it applies to a malware attack life cycle.
Perform Static as well as dynamic analysis of complex malwares and payloads.
Analyze various file formats like Doc, PDF, Java, Flash etc. to uncover the hidden codes within them.
Understand Assembly language basics and how it can be applied to manually read the reverse engineered codes of malware.
Deep understanding of various tools and techniques involving reverse engineering and static malware analysis.

Course content

4 sections • 36 lectures • 4h 4m total length

Introduction to Expert Malware Analysis and Reverse Engineering1:59
Detailed Course Overview6:42
System Requirements for the course4:52
Setting up your malware testing lab3:52
Setting up the tools in your malware lab3:32
Introduction to REMnux3:37
Introduction to Cyber Kill Chain7:05

Understanding Recon and Weaponization stages6:45
Spearphishing Emails as Delivery Mechanisms5:52
Analyzing Spearphishing emails and its headers7:18
Understanding Sender Policy Framework Protocol for Email Spam detection2:11
Understanding Microsoft Office File Format Structure6:46
Analyzing Malicious Office File Using Oledump - Part 14:34
Analyzing Malicious Office File Using Oledump - Part 27:29
Analyzing malicious OLE Files using Oletools - Part 14:21
Analyzing malicious OLE Files using Oletools - Part 26:11
Analyzing malicious OLE Files using Oletools - Part 34:14
Understanding PDF file structure - Part 16:49
Understanding PDF file structure - Part 22:38
Analyzing Malicious PDF files - Part 15:56
Analyzing Malicious PDF files - Part 26:07
Analyzing Malicious PDF file using PDF Stream Dumper5:32

Understanding the structure of Portable Executable files - Part 111:52
Portable executable files are the executable files for the windows operating system. This file format is the most critical portion of malware analysis as it is the actual executable code which is responsible for performing the infection behaviours and perform command and control operation. In this section, we are going to cover in detail about how we can analyze this file format and reverse engineer it using static and dynamic techniques.
Portable Executable File format analysis - Part 211:39
This lecture talks about advance details about the structure of PE files and how to parse it using common security tools like CFF explorer and 010 editor.
What happens when you run a Program10:14
This lecture tries to answer a simple question > What happens when a file is executed? What operations are performed by the operating system to launch the operation? This lecture tries to briefly answer this question. This is an important concept to understand as it lays the foundational work of understanding the behaviours of malware execution onto the windows operating system.
understanding Compilation process for Reverse Engineering6:51
understanding Compilation process for Reverse Engineering - Part 2 (Demo)8:12
Static malware analysis tools9:00
This lecture covers some of the useful tools for quick static analysis of PE files
Analyzing Ransomware through static analysis tools14:42

Requirements

Basics of Assembly language, Computer Applications and introductory idea of how malwares work.

Description

Malware analysis is a critical skill in the information security community. This course is logically designed to help you leap through the complicated steps of static and dynamic malware analysis in an easy and proactive way. After this course, you will be able to understand the core skills required in malware incident response investigations and analysis of Advance persistent threats. The course will guide you trough the basic requirements and necessary skillsets required in order to take your knowledge to the next level.

Some of the key take a-ways from this course are:

Over 4 hours of content purely focused on key skills required for effective analysis of web threats.
Fully interactive and community driven course.
Static and Dynamic malware analysis and its various steps.
File format analysis of standard formats like PDF, Flash, Word, Excel etc.
Understanding the Cyber kill chain and how it applies to malware attack life cycle.
Deep understanding of relevant tools that can help in uncovering complex malware traits.
Basics of Reverse Engineering and how we can analyze advance malware behavior using it.
Incidence response and report generation skills for information security professionals.

You can post your queries and doubts in the course and I will be more than happy to help you in your learning curve.

Who this course is for:

Beginners, security engineers/analyst, malware enthusiasts and advance security researchers.

Expert Malware Analysis and Reverse Engineering

What you'll learn

Explore related topics

Course content

Course Introduction & Overview of Cyber Kill chain7 lectures • 32min

Getting started with analyzing malicious Files15 lectures • 1hr 23min

Network Based analysis and forensics7 lectures • 58min

Prtable Executable File analysis & Reverse Engineering7 lectures • 1hr 13min

Requirements

Description

Who this course is for: