Reverse Engineering & Malware Analysis - Intermediate Level

Looking to advance your skills in reverse engineering and malware analysis? This intermediate-level course builds upon existing knowledge to take you from basic to intermediate proficiency. Learn practical techniques through detailed walk-throughs, focusing on the crucial skill of malware unpacking.

Modern malware often employs packing to evade detection. This course provides the necessary knowledge and skills to effectively unpack malware and analyze its components. We'll cover all essential tools and techniques, equipping you with an intermediate-level skillset for further exploration in this field. Even if malware analysis isn't your career goal, the reverse engineering skills gained are valuable for software reverse engineering and understanding how software functions.

This course is heavily practical, emphasizing hands-on application over theoretical lectures. You'll follow along with replicable walk-throughs. Key topics include:

• Malware Types & Terminology: Understand the landscape of malicious software.
• Dynamic & Static Analysis: Master both approaches to malware investigation.
• Assembly Language Refresher & Malicious APIs: Reinforce assembly fundamentals and identify dangerous API calls.
• API Hooking & Process Hijacking: Learn to intercept and manipulate API calls.
• Memory Analysis & Tracing: Develop techniques to pinpoint the optimal time and location to dump memory after unpacking.
• Section Alignment, Un-mapping & Re-basing: Address common challenges in memory analysis.
• Enumerating Breakpoints & Memory Tracing: Utilize debugging tools for in-depth memory examination.
• Hooking VirtualProtect, VirtualAlloc, GetProcAddress, CreateProcessInternalW: Master hooking critical Windows API functions.
• Scylla Plugin for Memory Dumping: Leverage a powerful plugin for efficient memory acquisition.
• Delphi Interactive Reconstructor: Utilize a tool for advanced memory analysis and code reconstruction.
• Memory Dumping from Memory Viewers & Process Hacker: Explore various tools for memory analysis.
• Memory Maps: Understand and interpret memory layout.
• API Enumeration Count Trick: Determine the ideal time for memory dumping.
• Self-Injection & Remote Thread Injection: Analyze advanced malware techniques.
• ...and more!

Who is this course for?

• Students with a basic understanding of malware analysis.
• Hackers seeking advanced reverse engineering tools and techniques.
• Reverse Engineers looking to expand into malware analysis.

Prerequisites:

• Basic knowledge of malware analysis or software reverse engineering.
• A Windows PC with a Virtual Machine and Flare-VM installed.

Note: If you lack foundational malware analysis skills, we recommend starting with our introductory course: [Reverse Engineering & Malware Analysis Fundamentals](link to previous course).

Enroll now and begin your journey into advanced reverse engineering and malware analysis!