Table of Contents for
Windows Malware Analysis Essentials

Version ebook / Retour

Cover image for bash Cookbook, 2nd Edition Windows Malware Analysis Essentials by Victor Marak Published by Packt Publishing, 2015
  1. Cover
  2. Table of Contents
  3. Windows Malware Analysis Essentials
  4. Windows Malware Analysis Essentials
  5. Credits
  6. About the Author
  7. Acknowledgments
  8. About the Reviewer
  9. www.PacktPub.com
  10. Preface
  11. What you need for this book
  12. Who this book is for
  13. Conventions
  14. Reader feedback
  15. Customer support
  16. 1. Down the Rabbit Hole
  17. Signed numbers and complements
  18. Boolean logic and bit masks
  19. Breathing in the ephemeral realm
  20. Sharpening the scalpel
  21. Performing binary reconnaissance
  22. Exploring the universe of binaries on PE Explorer
  23. Getting to know IDA Pro
  24. Entropy
  25. Summary
  26. 2. Dancing with the Dead
  27. Registers
  28. The initiation ritual
  29. Preparing the alter
  30. Code constructs in x86 disassembly
  31. Summary
  32. 3. Performing a Séance Session
  33. Debriefing – seeing the forest for the trees
  34. Preparing for D-Day – lab setup
  35. Whippin' out your arsenal
  36. Summoning the demon!
  37. Post infection
  38. Exorcism and the aftermath – debrief finale!
  39. Summary
  40. 4. Traversing Across Parallel Dimensions
  41. Alice in kernel land – kernel debugging with IDA Pro, Virtual KD, and VMware
  42. Summary
  43. 5. Good versus Evil – Ogre Wars
  44. Encoding/decoding – XOR Deobfuscation
  45. Malicious Web Script Analysis
  46. Byte code decompilers
  47. Document analysis
  48. Redline – malware memory forensics
  49. Malware intelligence
  50. Summary
  51. Index

What you need for this book

Apart from a working brain (which is not optional), you will need:

  • Any x86/x64 PC/Laptop (recent Mac hardware too) which is any system you have purchased in the past 5 years minimum with a version of Windows XP/7/ 8 or above. You can additionally use virtualization software like VMWare Fusion/Parallels if you are on MacOS to run the examples in Windows OS versions. Please refer to the respective software manuals for the installation procedures.
  • Some commercial tools that also have free versions from the vendor website (for instance IDA Pro).
  • Visual C++ 2008, which is the minimum version you will need in order to work with the programming examples and exercises in this book.
  • VMWare and VirtualBox, which are two software solutions to virtualization that will be instrumental in keeping your system safe and completing the malware analysis-specific workflows discussed in this book.

Most of the analysis tools are available as free downloads from the links included as they are mentioned in the chapters ahead.