This course provides a beginner-level introduction to the tools and methodologies used to perform malware analysis on executables found in Windows systems using a practical, virtual hands-on approach. The course introduces students to Disassembly, including subtopics on x86 Architecture, The Stack, C Code Constructs, and an introduction to IDA Pro. The content is developed and taught by FLARE malware analysts who are experienced in analyzing a diverse set of malware.
Syllabus
Introduction to Malware Analysis
Basic Static Analysis
Basic Dynamic Analysis
Microsoft .NET Framework
Windows Management Instrumentation – Malware Triage Powershell
Introduction to Ghidra
Application Programmer Interface (API) Analysis
File Analysis
Registry Analysis
Network Analysis
