Reverse Engineering Malware Training

Reverse Engineering Malware Training:

Reverse Engineering Malware Training Course with detailed hands-on exercises (Online, Onsite, and Classroom Live)

This Reverse Engineering Malware Training course introduces the concept of malware, how they function, their types, and how they are extensively used in Advanced Persistent attacks (APTs) to siphon off critical business information from an organization on regular basis. We start off with the concepts of Assembly language, PE Header, and disassembling v/s debugging with advanced debugging features. We also perform RE to analyze an application dissecting it to the level where malware code is present.

We provide a practice malware lab setup consisting of virtual machines and a sandbox environment. We use debuggers such as IDA and Ollydbg, disassemblers, and various monitoring tools to perform analysis to track the movement of the malware across the virtual network. We will also delve deep into advanced techniques such as analyzing shellcodes, PowerShell malware, malicious documents and anti-virus evasion, and so on. Further, we take a peek at different anti-reversing, anti emulation, and anti-debugging techniques used by advanced malware

What’s Included?

5 days of Reverse Engineering Malware Training with an expert instructor
Reverse Engineering Malware Electronic Course Guide
Certificate of Completion
100% Satisfaction Guarantee

Resources

Reverse Engineering Malware Training – https://www.wiley.com/
Reverse Engineering Malware Training – https://www.packtpub.com/
Reverse Engineering Malware Training – https://store.logicaloperations.com/
Reverse Engineering Malware Training – https://us.artechhouse.com/
Reverse Engineering Malware Training – https://www.amazon.com/

Related Courses

Class Prerequisites:

Be familiar with using Windows and Linux operating environments.

Reverse Engineering Malware Training – Course Outline:

DAY 1: Introduction to Malware Analysis and Reverse Engineering

Day one focuses on the fundamental knowledge required for malware analysis and reverse engineering. This day is designed to build critical skills required to proceed further into deeper discussions on reversing. You will also train on special-purpose reversing debuggers and disassemblers. Lab exercises will focus on the functionality of various reversing tools and basic static and dynamic analysis processes.

Basic static and dynamic analysis
Reverse engineering concepts and legality
Machine code
Assembly language
System- and code-level reversing
Assembly basics (registers, operands, instructions)
Fundamentals of reverse engineering tools (IDA Pro, Radare2)

DAY 2: Static and Dynamic Analysis

Day two encompasses a deep discussion with hands-on content for reversing Windows binaries. Key concepts include identifying code paths, and control functions, and developing a general understanding of the code to be analyzed. Debugging concepts are introduced and practiced in hands-on lab exercises.

Recognizing C Code constructs in assembly
Windows API
Windows Registry
Network APIs
DLLs
Processes, threads and services
Debugging process (stepping, breakpoints, modifying execution)
Kernel debugging
Debugging tools

DAY 3: Analyzing Malware Functionality and Behavior

Day three includes detailed coverage of reverse engineering malware. The focus is on live malware reversing using examples of viruses, Trojans, and rootkits collected from the wild.

Understanding common malware types and functionality
Process injection and replacement
DLL injection
Direct, hook and APC injection and other malware launching techniques
Registry persistence
Svchost.exe
Trojanized system binaries
DLL load order hijacking
Malware network behavior analysis
Kernel mode rootkits (SSDT hooking, interrupts)
User mode rootkits

DAY 4: Anti-Reversing Techniques

Day four works with various anti-reversing techniques that software developers and malware writers put in place to make reverse engineering more difficult.