CYBER 5W

Introduction to Malware Analysis

• Malware Types, Distribution Methods, and Common Threat Vectors
• Role of Malware Analysis in Cybersecurity Operations
• Fundamentals of Malware Identification
• Overview of Analysis Techniques: Static vs. Dynamic
• Preparing a Safe Analysis Environment

Static Malware Analysis 101

• Binary Structure Fundamentals
• Identifying Malware Signatures and Embedded Artifacts
• Working with Basic Static Tools (Strings, PEview, Detect It Easy, etc.)
• Extracting Metadata and Code Characteristics
• Hands-on Static Analysis Exercises

Dynamic Malware Analysis 101

• Setting Up Isolated, Controlled Execution Environments
• Monitoring Malware Behavior in Real-Time
• System Interaction Analysis (Processes, Files, Registry)
• Network Traffic Monitoring and Behavioral Indicators
• Capturing and Interpreting Execution Artifacts

Static Malware Analysis 102 – IDA Pro

• IDA Pro Interface and Workflow
• Disassembly Navigation and Code Exploration
• Function Analysis and Cross-Reference Mapping
• Understanding Flow Charts and Decompiled Code
• Identifying Malware Capabilities via Disassembly

Static Malware Analysis 102 – Ghidra

• Ghidra Project Setup and Navigation
• Disassembly & Decompiled View Analysis
• Reverse Engineering Techniques Using Ghidra
• Analyzing Code Structures and Control Flows
• Comparing Ghidra vs. IDA Pro Approaches

Dynamic Malware Analysis 102

• Advanced Debugging Concepts
• Walking Through Code Using Debuggers
• Identifying Runtime Behavior and Logic Flow
• Malware Evasion and Anti-Debugging Techniques
• Unpacking Obfuscated or Packed Malware

Analyzing Managed Code (Readable / Uncompiled)

• Understanding .NET, Java, and Python Malware Structures
• Using Decompilers for High-Level Code Analysis
• Identifying Behavioral Intent in Readable Source
• Reverse Engineering and Artifacts Extraction
• Working with Managed Execution Environments

Extracting IOCs and Writing YARA Rules

• IOC Fundamentals and Threat Detection Use Cases
• Extracting Indicators from Static and Dynamic Analysis
• Understanding YARA Structure and Rule Components
• Writing Effective and Accurate YARA Rules
• Testing and Validating YARA Rules Against Samples

More Than 10 Extra Hands-on Labs

• Real-World Malware Samples and Case Scenarios
• Process Injection Techniques (e.g., DLL Injection, Process Hollowing)
• Analyzing Network-Based Malware Behavior
• Reverse Engineering Obfuscated Code
• Hybrid Static + Dynamic Analysis Workflows