Malware Analyst Professional - Level 2
- Buy now
- Learn more
Introduction to Reverse Engineering

1 - Course Introduction
2 - Intro to Reverse Engineering - Part 1
3 - Intro to Reverse Engineering - Part 2
4 - Bitwise Operations
Understanding Windows API Functions

1 - Introduction to Windows API Functions
2 - Configuring Debug Symbols
3 - Reading MSDN Documentation
4 - Understanding Windows API Functions - Part 1
5 - Understanding Windows API Functions - Part 2
Code Injection

1 - Introduction to Code Injection
2 - Process Injection Classification
3 - Process Injection using CreateRemoteThread
4 - Process Hollowing - Part 1
5 - Process Hollowing - Part 2
Process Injection Poster - Part 1.pdf
Process Injection Poster - Part 2.pdf
CreateRemoteThread.cpp
Process Injection.PNG
High-Level Code Injection Steps
Dancing with Self-defending Malware

1 - Introduction to Anti-Analysis
2 - Anti-Debugging - Part 1
3 - Anti-Debugging - Part 2
4 - Anti-VM - Part 1
5 - Anti-VM - Part 2
6 - Anti-VM - Part 3
7 - Anti-AV
space1.ex
AntiWorld.cpp
Anti-Analysis Intro
Fighting Packed Malware to the Death

Instructions
1 - Introduction to Packers and the Unpacking Process
2 - Unpacking the WannaCry Ransomware
3 - Manual Unpacking of UPX Packed Malware
4 - Manual Unpacking of PECompact Packed Malware
5 - Manual Unpacking of ASPack Packed Malware
Packing Overview
Malicious Shellcode Analysis

1 - Introduction to Shellcode Analysis
2 - Shellcode Reverse Engineering - Part 1
3 - Shellcode Reverse Engineering - Part 2
4 - Shellcode Reverse Engineering - Part 3
shellcode.zip
Shellcode Analysis Introduction
Ransomware Reverse Engineering

1 - DarkSide Ransomware Initial Analysis
2 - DarkSide Ransomware Runtime Code Unpacking - Part 1
3 - DarkSide Ransomware Runtime Code Unpacking - Part 2
4 - DarkSide Ransomware Runtime Code Unpacking - Part 3
5 - DarkSide Ransomware Dynamic API Resolve
6 - DarkSide Ransomware Rebuilding the IAT (Import Address Table)
7 - DarkSide Ransomware TTPs Dissection - Part 1
8 - DarkSide Ransomware TTPs Dissection - Part 2
Reverse Engineering .NET Malware

1 - SolarWinds Sunburst Backdoor Initial Analysis
2 - SolarWinds Sunburst Backdoor Backtracking (Function Call Tree Analysis)
3 - SolarWinds Sunburst Backdoor Reverse Engineering - Part 1
4 - SolarWinds Sunburst Backdoor Reverse Engineering - Part 2
5 - SolarWinds Sunburst Backdoor Reverse Engineering - Part 3
6 - SolarWinds Sunburst Backdoor Reverse Engineering - Part 4
7 - SolarWinds Sunburst Backdoor Reverse Engineering - Part 5

Understanding Windows API Functions

This section explores the critical role of Windows API functions in malware analysis and reverse engineering. It begins with an introduction to how these functions serve as a bridge between software and the operating system, enabling processes to interact with system resources. Students learn to configure debug symbols to enhance the debugging experience and navigate MSDN documentation to understand API functions effectively. Advanced lessons delve into analyzing API calls, identifying their purpose, and using tools like IDA Pro and x64dbg to trace their execution. By the end of this section, students gain a comprehensive understanding of Windows APIs and their significance in dissecting malware functionality.

5 Lessons