Malware Analyst Professional - Level 2
- Buy now
- Learn more
Introduction to Reverse Engineering

1 - Course Introduction
2 - Intro to Reverse Engineering - Part 1
3 - Intro to Reverse Engineering - Part 2
4 - Bitwise Operations
Understanding Windows API Functions

1 - Introduction to Windows API Functions
2 - Configuring Debug Symbols
3 - Reading MSDN Documentation
4 - Understanding Windows API Functions - Part 1
5 - Understanding Windows API Functions - Part 2
Code Injection

1 - Introduction to Code Injection
2 - Process Injection Classification
3 - Process Injection using CreateRemoteThread
4 - Process Hollowing - Part 1
5 - Process Hollowing - Part 2
Process Injection Poster - Part 1.pdf
Process Injection Poster - Part 2.pdf
CreateRemoteThread.cpp
Process Injection.PNG
High-Level Code Injection Steps
Dancing with Self-defending Malware

1 - Introduction to Anti-Analysis
2 - Anti-Debugging - Part 1
3 - Anti-Debugging - Part 2
4 - Anti-VM - Part 1
5 - Anti-VM - Part 2
6 - Anti-VM - Part 3
7 - Anti-AV
space1.ex
AntiWorld.cpp
Anti-Analysis Intro
Fighting Packed Malware to the Death

Instructions
1 - Introduction to Packers and the Unpacking Process
2 - Unpacking the WannaCry Ransomware
3 - Manual Unpacking of UPX Packed Malware
4 - Manual Unpacking of PECompact Packed Malware
5 - Manual Unpacking of ASPack Packed Malware
Packing Overview
Malicious Shellcode Analysis

1 - Introduction to Shellcode Analysis
2 - Shellcode Reverse Engineering - Part 1
3 - Shellcode Reverse Engineering - Part 2
4 - Shellcode Reverse Engineering - Part 3
shellcode.zip
Shellcode Analysis Introduction
Ransomware Reverse Engineering

1 - DarkSide Ransomware Initial Analysis
2 - DarkSide Ransomware Runtime Code Unpacking - Part 1
3 - DarkSide Ransomware Runtime Code Unpacking - Part 2
4 - DarkSide Ransomware Runtime Code Unpacking - Part 3
5 - DarkSide Ransomware Dynamic API Resolve
6 - DarkSide Ransomware Rebuilding the IAT (Import Address Table)
7 - DarkSide Ransomware TTPs Dissection - Part 1
8 - DarkSide Ransomware TTPs Dissection - Part 2
Reverse Engineering .NET Malware

1 - SolarWinds Sunburst Backdoor Initial Analysis
2 - SolarWinds Sunburst Backdoor Backtracking (Function Call Tree Analysis)
3 - SolarWinds Sunburst Backdoor Reverse Engineering - Part 1
4 - SolarWinds Sunburst Backdoor Reverse Engineering - Part 2
5 - SolarWinds Sunburst Backdoor Reverse Engineering - Part 3
6 - SolarWinds Sunburst Backdoor Reverse Engineering - Part 4
7 - SolarWinds Sunburst Backdoor Reverse Engineering - Part 5

Introduction to Reverse Engineering

This section lays the foundation for reverse engineering in the context of malware analysis. It begins with a course overview by Uriel Kosayev, detailing the advanced topics to be covered. The lessons then introduce reverse engineering as the process of uncovering the inner workings of software, using tools such as disassemblers, decompilers, and debuggers. Core concepts of x86 architecture, including CPU components, memory layouts, and the interaction between RAM, the CPU, and registers, are explained in detail. Further, the section delves into assembly language operations like PUSH, POP, and control flow instructions, emphasizing their importance in analyzing malicious binaries. The final lesson explores bitwise operations (AND, OR, NOT, XOR) and their applications, providing practical examples to enhance understanding. By the end of this section, students acquire a solid technical foundation for diving deeper into malware reverse engineering.

4 Lessons