Malware Analyst Professional - Level 1
- Buy now
- Learn more
Course Syllabus

Malware Analyst Professional - Level 1 Syllabus.pdf
Module 1: Foundations & Lab Setup

Malware Analysis Lab OVA Deployment
1 - Introduction to Malware Analysis.mp4
2 - Lab Setup - Intro.mp4
3 - Lab Setup - Deploying Flare-VM.mp4
4 - Lab Setup - Connecting to INetSim.mp4
Module 2: From Source to Assembly: Building & Peeking Inside C Programs

1 - Installing Visual Studio.mp4
2 - The four stages of Development.mp4
3 - Basic C Code Example - Part 1.mp4
4 - Basic C Code Example - Part 2.mp4
example1.c
example2.c
5 - Basic Reverse Engineering - Part 1.mp4
6 - Basic Reverse Engineering - Part 2.mp4
Module 3: Peering into Portable Executables

1 - PE Structure Overview - Part 1.mp4
2 - PE Structure Overview - Part 2.mp4
3 - PE-exe vs. PE-dll.mp4
Module 4: Static Triage, Unpacking & Real-World Walk-Through

1 - Purpose and Goals of Malware Analysis.mp4
2 - Understanding Signature Names and VirusTotal Overview.mp4
3 - IoC vs. IoA.mp4
4 - Identifying File Types.mp4
5 - Calculating Hashes.mp4
6 - Strings Extraction.mp4
7 - Packing Analysis - Part 1.mp4
8 - Packing Analysis - Part 2.mp4
9 - Packing Analysis - Part 3.mp4
10 - Identifying Malicious Functionality.mp4
11 - Approaching and Reading Documentations.mp4
12 - Dissecting FlawedAmmyy - Part 1.mp4
13 - Dissecting FlawedAmmyy - Part 2.mp4
14 - Saving your RE progress to an IDB File.mp4
Module 5: Live Behaviour & Dynamic Reverse Engineering

1 - Introduction to Dynamic Analysis.mp4
2 - Working with Process Explorer.mp4
3 - Extracting IoCs using Process Hacker.mp4
4 - Working with Procmon.mp4
5 - Monitoring WinAPI Functions using API Logger.mp4
6 - Inspecting Process Command Line Parameters using CMD Watcher.mp4
7 - Debugging DLL Files with IDA Disassembler.mp4
8 - FlawedAmmyy RAT - Attack Flow PCAP Analysis Overview.mp4
9 - FlawedAmmyy RAT Dynamic Analysis .mp4
10 - FlawedAmmyy RAT Dynamic Reverse Engineering - Part 1.mp4
11 - FlawedAmmyy RAT Dynamic Reverse Engineering - Part 2.mp4
12 - Detecting FlawedAmmyy RAT with YARA.mp4
Module 6: Dissecting Malicious Documents: PDFs & Office Macros

1 - Introduction to Malicious Documents.mp4
2 - Introduction to Analyzing Malicious PDF Files.mp4
3 - Analyzing the CVE-2008-2992 PDF Exploit.mp4
4 - Analyzing VBA Macros - Introduction.mp4
5 - Analyzing VBA Macros - Shellcode Injection.mp4
Malware Lab Samples

404 Not Found - Isn't that a Mystery?!
space1 - FlawedAmmyy.zip
Malicious Documents Lab Samples.zip
YARA Rules

sodinokibi.yara
PE.yara
WannaCry.yara
UPX.yara
Cryak.yara

Module 4: Static Triage, Unpacking & Real-World Walk-Through

Speed is everything when a suspicious file lands on your desk. This module teaches you to confirm maliciousness and extract intelligence within minutes, before you ever press Run. You’ll translate AV labels, separate quick-burn IoCs from behaviour-rich IoAs, fingerprint samples by type, hash, and embedded strings, and pierce common packers to reveal true payloads. Then you will practise turning authoritative docs and API references into instant insight and apply the full workflow to a live FlawedAmmyy RAT: unpack it, map its C2 logic, flag persistence tricks, and save your progress in IDA for future use. After this module, you’ll wield a repeatable static-analysis playbook that delivers actionable results fast and sets you up for deeper dynamic or reversing tasks ahead.

14 Lessons