Practical Malware Analysis Essentials for Incident Responders
Industry experts analyze emerging threats surrounding Practical Malware Analysis Essentials for Incident Responders.
Summary
Overview: Learn how to analyze Windows malware samples, with a hands-on series of projects in a fun, CTF-style environment. There are four levels of analysis challenges. 1. Basic static analysis with file, strings, PEiD, PEview, Dependency Walker, and VirusTotal 2. Basic dynamic analysis with Process Monitor, Process Explorer, RegShot, and Wireshark 3. Advanced static analysis with IDA Pro Free and Hopper 4. Advanced dynamic analysis with Ollydbg and Windbg The first challenges are easy enough for beginne
Key Topics: rs, and the later ones get difficult enough to interest intermediate security professionals. We will demonstrate the challenges, discuss the technologies and techniques, and help participants get through them as needed. These challenges use harmless malware samples from the "Practice Malware Analysis" book by Michael Sikorski and Andrew Honig. All materials and challenges are freely available at samsclass.info, including slide decks, video lectures, and hands-on project instructions. They will remain available after the workshop ends.
Related talks
RSAC Cybersecurity·50 min
Security researchers examine technical aspects of Dynamic Analysis of MacOS Malware Using SpriteTree.
RSAC Cybersecurity·47 min
Presenters detail vulnerability discovery and exploitation in End-to-End Analysis of a Domain Generating Algorithm Malware Family.
Black Hat·47 min
Security researchers examine technical aspects of IoT Malware: Comprehensive Survey, Analysis Framework and Case Studies.