.jpg){kind=logo}
WU-SEC375.AJ1
SEC 375: Malware Analysis Techniques
Self-paced · 1 year access
38 Hands-On LiveLabs
Practice real IT tasks in guided environments.
- Real environments
- Auto-graded
- No installation
01 / Lessons & labs
See exactly what you will learn and practice
Lessons
14 Interactive Lessons · 105 topics01 Preface 4 topics +
- Who this course is for
- What this course covers
- To get the most out of this course
- Conventions used
02 Cybercrime, APT Attacks, and Research Strategies 7 topics · 7 LiveLab +
- Why malware analysis?
- Exploring types of malware
- The MITRE ATT&CK framework explained
- APT and zero-day attacks and fileless malware
- Choosing your analysis strategy
- Setting up the environment
- Summary
7 LiveLab in this lesson — see the labs panel →
03 A Crash Course in Assembly and Programming Basics 10 topics · 3 LiveLab +
- Basics of informatics
- Architectures and their assembly
- Becoming familiar with x86 (IA-32 and x64)
- Exploring ARM assembly
- Basics of MIPS
- Diving deep into PowerPC
- Covering the SuperH assembly
- Working with SPARC
- Moving from assembly to high-level programming languages
- Summary
3 LiveLab in this lesson — see the labs panel →
04 Basic Static and Dynamic Analysis for x86/x64 8 topics · 5 LiveLab +
- Working with the PE header structure
- Static and dynamic linking
- Using PE header information for static analysis
- PE loading and process creation
- Basics of dynamic analysis using OllyDbg and x64dbg
- Debugging malicious services
- Essentials of behavioral analysis
- Summary
5 LiveLab in this lesson — see the labs panel →
05 Unpacking, Decryption, and Deobfuscation 10 topics · 3 LiveLab +
- Exploring packers
- Identifying a packed sample
- Automatically unpacking packed samples
- Manual unpacking techniques
- Dumping the unpacked sample and fixing the import table
- Identifying simple encryption algorithms and functions
- Advanced symmetric and asymmetric encryption algorithms
- Applications of encryption in modern malware – Vawtrak banking Trojan
- Using IDA for decryption and unpacking
- Summary
3 LiveLab in this lesson — see the labs panel →
06 Inspecting Process Injection and API Hooking 8 topics · 3 LiveLab +
- Understanding process injection
- DLL injection
- Diving deeper into process injection
- A dynamic analysis of code injection
- Memory forensics techniques for process injection
- Understanding API hooking
- Exploring IAT hooking
- Summary
3 LiveLab in this lesson — see the labs panel →
07 Bypassing Anti-Reverse Engineering Techniques 7 topics · 3 LiveLab +
- Exploring debugger detection
- Handling the evasion of debugger breakpoints
- Escaping the debugger
- Understanding obfuscation and anti-disassemblers
- Detecting and evading behavioral analysis tools
- Detecting sandboxes and VMs
- Summary
3 LiveLab in this lesson — see the labs panel →
08 Understanding Kernel-Mode Rootkits 9 topics · 2 LiveLab +
- Kernel mode versus user mode
- Windows internals
- Rootkits and device drivers
- Hooking mechanisms
- DKOM
- Process injection in kernel mode
- KPP in x64 systems (PatchGuard)
- Static and dynamic analysis in kernel mode
- Summary
2 LiveLab in this lesson — see the labs panel →
09 Handling Exploits and Shellcode 6 topics · 2 LiveLab +
- Getting familiar with vulnerabilities and exploits
- Cracking the shellcode
- Exploring bypasses for exploit mitigation technologies
- Analyzing Microsoft Office exploits
- Studying malicious PDFs
- Summary
2 LiveLab in this lesson — see the labs panel →
10 Reversing Bytecode Languages – .NET, Java, and More 8 topics · 2 LiveLab +
- The basic theory of bytecode languages
- .NET explained
- .NET malware analysis
- The essentials of Visual Basic
- Dissecting Visual Basic samples
- The internals of Java samples
- Analyzing compiled Python threats
- Summary
2 LiveLab in this lesson — see the labs panel →
11 Scripts and Macros – Reversing, Deobfuscation, and Debugging 8 topics · 3 LiveLab +
- Classic shell script languages
- VBScript explained
- VBA and Excel 4.0 (XLM) macros and more
- The power of PowerShell
- Handling JavaScript
- Behind C&C – even malware has its own backend
- Other script languages
- Summary
3 LiveLab in this lesson — see the labs panel →
12 Dissecting Linux and IoT Malware 7 topics · 3 LiveLab +
- Explaining ELF files
- Exploring common behavioral patterns
- Static and dynamic analysis of x86 (32- and 64-bit) samples
- Learning about Mirai, its clones, and more
- Static and dynamic analysis of RISC samples
- Handling other architectures
- Summary
3 LiveLab in this lesson — see the labs panel →
13 Introduction to macOS and iOS Threats 7 topics +
- Understanding the role of the security model
- File formats and APIs
- Attack stages
- Advanced techniques
- Static and dynamic analysis of macOS and iOS samples
- The analysis workflow
- Summary
14 Analyzing Android Malware Samples 6 topics · 2 LiveLab +
- (Ab)using the Android internals
- Understanding Dalvik and ART
- File formats and APIs
- Malware behavior patterns
- Static and dynamic analysis of threats
- Summary
2 LiveLab in this lesson — see the labs panel →
Hands-On Labs Our edge
38 LiveLabs- Examining Spyware
- Using the Backdoor Tool
- Simulating a DDoS Attack
- Scanning and Classifying Different Types of Viruses
- Examining MITRE ATT&CK
- Performing Reconnaissance
- Installing VirtualBox
- Performing the AND Operation
- Understanding the Circular shift (Rotate) Operator
- Understanding OR and XOR Operators
- Displaying the PE Header
- Turning on DEP
- Classifying Malware Family
- Using Resource Monitor
- Tracing Packets Using Wireshark
- Creating and Using YARA Rules
- Using an Asymmetric Algorithm
- Using a Symmetric Algorithm
- Exploring Windows Registry Entries
- Performing Code Injection
- Using Volatility for Memory Forensic Analysis
- Checking the PEB
- Executing Batch Scripting Commands in Windows
- Detecting Virtualization through Registry Keys
- Performing an MITM Attack
- Detecting Rootkits
- Launching a DoS Attack
- Performing Local Privilege Escalation
- Exploring Packers Using DIE
- Analyzing a Sample Using Ghidra
- Understanding the Bash Command-line Interface
- Examining Malware Obfuscation and Evasion Techniques
- Executing PowerShell Command-line Arguments
- Using Syscalls for Filesystem, Network, and Process Management
- Accessing the Assembly Code
- Using TCPdump to Capture Packets
- Performing Static Analysis with Ghidra
- Running the Android Emulator on a Virtual Machine
Labs run in your browser — nothing to install.
Keep going
You might also like
Prepare for SEC 375: Malware Analysis Techniques
One-time payment. Full access for 1 year. Start with a free trial if you want to look around first.
- 1 year of full access
- 38 LiveLab included
- Certificate of completion
No credit card required