Reverse Engineering Malware

In this series, we will examine how to reverse engineer malware. Like so many skills in information security, these skills can be used by both Black and White Hats. White Hats use to it understand how the malware works to defeat it and to assign attribution; the Black Hats use it to reverse engineer a known piece of malware to give it additional capabilities and avoid detection. Whatever you do, this is a very high-level skill-set that is great demand within our industry. It is probably the highest paid sub-discipline within information security.

​

I will attempt walk you slowly through the knowledge base and skill sets you will need to reverse malware. These include a basic knowledge of assembler and C, how to use such tools as IDA Pro, Immunity and Ollydbg, basics of Windows and Linux operating system structure and function and then finally, how to edit to code to add functionality and stealth.

​

Why You Should Study Reverse Engineering of Malware

​

​

​

Vault 7 Reveals that Even the CIA Reverse Engineers Malware to Re-Use Code

​

​

​

Reverse Engineering Malware, Part 1: Getting Started

​

​

​

Reverse Engineering Malware, Part 2: Assembler Basics

​

​

​

Reverse Engineering Malware, Part 3: IDA Pro Introduction

​

​

​

Reverse Engineering Malware, Part 4: Windows Internals

​

​

​

Reverse Engineering Malware, Part 5: OllyDBG Basics

​

​

​

Reverse Engineering Malware, Part 6: System-Level Analysis

​

​

​

Reverse Engineering Malware: Reversing and Disassembly Tools

​

​

​

Reverse Engineering Malware: Getting Started with Ghidra, Part 1

​

​

​

Reverse Engineering Malware: Getting Started with Ghidra, Part 2

​

​

​

Reverse Engineering Malware: Ghidra, Part 3 Analysis of Ransomware (WannaCry)