Record · corpus.blog/posts/01a08742-66e1-7362-b038-4c38f784764b

Malware Analysis 101

blog.alnarra.com · published 13 October 2020

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at blog.alnarra.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
External links: 41
Words captured: 4,764

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgQEAjMq7TiOko6bdGThakGohah1CAox1yr1M5epf-Jtc_RTAlLjhsbqz0-UQ5sL51WCNkhtrbQeaKqLg7LJ16uRz2UpW8oeiD5d8WVqpdFmCA5wsx6IlhN28o-nrZVKo70uFBvb3wpvP8/s1890/8+key+areas.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiUAumup7Le9neUer33uc0oCZUc6WUR0IiFR851CbFvJEb1zQnA3TIoSp_99MaiwKIWOgp7bYBlrjGANK9LAClDfJPRLX9c7KV-RoyUvn-QUCRN13kTkjXIh6r0SJL8VBIbqZGKU1RjWpM/s1890/os_internals.png

blogger.googleusercontent.com

https://digital-forensics.sans.org/media/SANS_Poster_2018_Hunt_Evil_FINAL.pdf

digital-forensics.sans.org

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg6R8pAJpsD1OPidatpRSXDuvbZ3TPZXYHxmf1IZp2yz9xitlr2uHO07LKRjNlbZXmiuw2YkdInxRjrGzu5B_cxZxRBOuH7N4KEVN1P8kVsUoNf3vFCrWdSKeTI0Xwmj_7oNA5qt-vIhvs/s1890/coding.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhstMQBbFk4xbjqTHFkx4yuywzSQm6vWnalLvKpb7P5bGubedj7dMCYlCWqJFpqp6Xgtob-sjDuz7JMmmfXciUffh5N2OYg6U96St03GKMPlfcy8rNLuYw0DZ3R2_q3lBVf9edC3q-wlxE/s1890/learn_to_code.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhqJCjdNpEfJJ9CnP5CV5atyiWgQ0GnGUtq6YbjmV72s5ALasJu7p-BxMvwNhodwtg7vzSchKqrzqIwDlTpf0S5FzUbnGrvOKMJ2NWUcy72kKsyQ50xiUVxGZH4GiVjjQsj3sLO0k4cUng/s1890/file_formats.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjdrTXG_SDjBJDFE7SZ1eniVW25ni9SMIsyU_pottDiTjwN8j43cSw674cIT5ad_Ck7LXmy0WhsivYrOPT5GdGbnfJSAA7RQwfC1q8_Q1sH52ibeJFHiExxnU6gtX24cxJXFbcZBDlwa3U/s1899/dynamic+Analysis.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiJfaQxPOOiEvB9WabGx59d48QY53ieiiG2tszVaQqMbWScAVT11-p2jdpAv2iWx90GLm1GaBBZwy-g9UQjsBdquhDXsgabsG7Qq59mkre3RkbacrtZHEljkNG7oxA9eAFX2y26Ps7Be6o/s1899/building+a+virtual+lab.png

blogger.googleusercontent.com

https://leanpub.com/avatar

leanpub.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiIvcME5T_T20x74m6yguSVQbc1Zsc7Wz_EFeBxKYh6i1bpXrgKUoDjkhZWfHCveElu4hl0ja7tp5RdfSrIqB4hK58HRZjQEs1IGbYzKxbx4ohGKQhHPN9ExcgCGJ2e-Emfghd553dHoys/s1899/memory_forensics.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj2utiJKdQvPrZpkgIvzbOoJFmYxPY9VJs4wuG4iI_LCpst3ah1XQvWiCxb-OcnnO2ezsm5yIJ8SU6y7CTbXsy6u_GEpEPFrh2Crz4ZwnjGFHgUkPwVCuwTkVTiMgFWZge-yV9CyLAdOXs/s1899/reverse_engineering.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhUhVRzOfz9Nyw5-Qw2O6KoYy2WhyphenhyphenUIdWcztnc4ucAwC4EEB7pdGte6GM0whPjJWhInf1Jtz44_GfqFQdE6m3KD9ExdJ-En601j2bWt5fSj7dAH-EmNXIFO4cARB6fyn9RqgA6WC-Ot7oo/s1899/obfusication.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhgoeH4d7KH4gpQRJbZAoLYF4GXbUQNDqvghm87LZW7eUrl2dIsMlkYMiizQKANUXbeSS2ryutxgde20vpG4d0RCVSYvab5YMo7O1UOx7T9dz8fWY731TY64JKGAFe6EdDyfoxHgCicaqg/s1899/iocs.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj6mF2wPFtYkDYJkPlCKhcK5zooZF1_5aUJH2qqm0nxsHltgX_4dFmsW554RIJPznA67M_FHYFF32cZqynYpocP2AFzlkJ60aW65ns0bToUAqR5WPt9-_ki4-SRfj0SyHee8_NSm655plg/s1920/resources.png

blogger.googleusercontent.com

https://remnux.org/

remnux.org

http://sandsprite.com/blogs/index.php?uid=7&pid=57

sandsprite.com

https://ntcore.com/?page_id=388

ntcore.com

https://www.fireeye.com/blog/threat-research/2017/07/flare-vm-the-windows-malware.html

fireeye.com

https://ghidra-sre.org

ghidra-sre.org

https://www.hex-rays.com/products/ida/

hex-rays.com

https://rada.re/n/?ref=blog.zsec.uk

rada.re

http://www.wireshark.org/

wireshark.org

https://docs.microsoft.com/en-us/sysinternals/downloads/sysinternals-suite

docs.microsoft.com

https://docs.microsoft.com/en-us/windows-hardware/drivers/debugger/debugger-download-tools

docs.microsoft.com

https://mh-nexus.de/en/hxd/

mh-nexus.de

https://www.procdot.com/

procdot.com

https://github.com/icsharpcode/ILSpy

github.com

https://any.run/

any.run

https://www.virustotal.com/gui/

virustotal.com

https://www.fireeye.com/services/freeware/redline.html

fireeye.com

https://www.hybrid-analysis.com/

hybrid-analysis.com

https://www.crowdstrike.com/resources/community-tools/crowdinspect-tool/

crowdstrike.com

https://sourceforge.net/projects/regshot/

sourceforge.net

https://crackmes.one/

crackmes.one

https://www.youtube.com/channel/UCVFXrUwuWxNlm6UNZtBLJ-A

youtube.com

https://www.udemy.com/

udemy.com

https://www.cybrary.it/

cybrary.it

https://www.amazon.com/Malware-Analysts-Cookbook-DVD-Techniques/dp/0470613033

amazon.com

https://www.amazon.com/Practical-Malware-Analysis-Hands-Dissecting/dp/1593272901

amazon.com

https://www.amazon.com/IDA-Pro-Book-Unofficial-Disassembler/dp/1593272898

amazon.com

https://www.microsoftpressstore.com/store/windows-internals-part-1-system-architecture-processes-9780735684188

microsoftpressstore.com