Reverse Engineering & Malware Analysis – Intermediate Level

An Intermediate Level Course on Reverse Engineering and Analyzing Malware

Created by: Paul Chin, PhD
College lecturer

What Will I Learn?

• Types of Malware and Terminologies
• Static Analysis
• Dynamic Analysis
• Assembly Language Refresher and Malicious APIs
• API Hooking, Process Hijacking, Dumping Memory
• Identifying Standard and Custom Packers
• Unpacking Packed Malware
• Enumerating Breakpoints and Memory Tracing
• Hooking VirtualProtect, VirtualAlloc, GetProcAddress, CreateProcessInternalW and other common API's
• Using Scylla Plugin to Dump Memory, Fixing IAT Tables
• Using Delphi Interactive Reconstructor
• Dumping Memory from Memory Viewer, Process Hacker and Memory Maps
• API Enumeration Count Trick To Know When to Dump
• Self-Injection and Remote Thread Injection
• Fixing Section Alignments, Unmapping and Re-Basing Dumped Files
• and more...

Requirements

• Windows PC with Virtual Machine and Flare-VM Installed
• Some basics in malware analysis or software reverse engineering.

Target audience

• Students who has already done a basic level malware analysis or reverse engineering course
• Hackers looking for additional tools and techniques to reverse software
• Reverse Engineers who want to venture into malware analysis