Subscription

All Products

Best Sellers

New Releases

Books

Videos

Audiobooks

Learning Hub

Newsletter Hub

Free Learning

You're reading from Mastering Malware Analysis The complete malware analyst's guide to combating malicious software, APT, cybercrime, and IoT attacks

Product type Paperback

Published in Jun 2019

Publisher Packt

ISBN-13 9781789610789

Length 562 pages

Edition 1st Edition

Languages

Python

Concepts

Malware Analysis

Authors (2):

Alexey Kleymenov

Amr Thabet

View More author details

Table of Contents (18) Chapters

Title Page

About Packt

Contributors

Preface

1. A Crash Course in CISC/RISC and Programming Basics FREE CHAPTER

2. Basic Static and Dynamic Analysis for x86/x64

3. Unpacking, Decryption, and Deobfuscation

4. Inspecting Process Injection and API Hooking

5. Bypassing Anti-Reverse Engineering Techniques

6. Understanding Kernel-Mode Rootkits

7. Handling Exploits and Shellcode

8. Reversing Bytecode Languages: .NET, Java, and More

9. Scripts and Macros: Reversing, Deobfuscation, and Debugging

10. Dissecting Linux and IoT Malware

11. Introduction to macOS and iOS Threats

12. Analyzing Android Malware Samples

1. Other Books You May Enjoy

Dynamic analysis with OllyDbg/immunity debugger

After we've explained processes, threads, and the execution of the PE files, now it's time to start debugging a running process and understanding its functionality through tracing over its code in the runtime.

Debugging tools

There are multiple debugging tools we can use, and here we will just give three examples that are very similar in their UIs and actually have a lot of code in common (at least two of them):

OllyDbg: This is the most well-known debugger in the Windows platform, and its UI has become the standard for most Windows debuggers:

Figure 15: OllyDbg UI

Immunity Debugger: This is basically a scriptable clone of OllyDbg, and was created mainly for...

The rest of the chapter is locked

A free Packt account unlocks extra newsletters, articles, discounted offers, and much more. Start advancing your knowledge today.

Unlock this book and the full library FREE for 7 days

Get unlimited access to 7000+ expert-authored eBooks and videos courses covering every tech area you can think of

Start free trial

Renews at $15.99/month. Cancel anytime

Authors (2)

Alexey Kleymenov

Alexey Kleymenov started working in the information security industry in his second year at university and now has more than 14 years of practical experience at several international cybersecurity companies. He is a malware analyst and software developer who is passionate about reverse engineering, automation, and research. Alexey has taken part in numerous investigations analyzing all types of malicious samples, has developed various systems to perform threat intelligence activities in the IT, OT, and IoT sectors, and has authored several patents. Alexey is a member of the (ISC)² organization and holds the CISSP certification. Finally, he is a founder of the RE and More project, teaching people all over the world how to perform malware analysis in the most efficient way.

See other products by Alexey Kleymenov

Amr Thabet

Amr Thabet is a malware researcher and an incident handler with over 10 years of experience. He has worked in several Fortune 500 companies, including Symantec and Tenable. Currently, he is the founder of MalTrak, providing real-world in-depth training in malware analysis, incident response, threat hunting, and red teaming to help the next generation of cybersecurity enthusiasts to build their careers in cybersecurity. Amr is also a speaker and trainer at some of the top security conferences all around the world, including Blackhat, DEFCON, Hack In Paris, and VB Conference. He was also featured in Christian Science Monitor for his work on Stuxnet.

See other products by Amr Thabet