Category: Malware

Most of the work we will be doing in reverse engineering will be with assembler language. This simple and sometimes tedious language can reveal a plethora of information on the source code. When we can’t see or recover the source code of the malware or other software, we can use tools such as dis-assemblers and […]

Welcome back, my aspiring malware analysts! In my introductory tutorials on reverse engineering malware (Part 1-5) we introduced many new concepts. Now its time to put some of those concepts to work and begin analyzing some sample malware! In Part 1 of this series, I pointed out that there are two primary ways of analyzing […]

I am about to embark upon probably the most technically demanding tutorial series, Reverse Engineering Malware. Before I do so, I thought I would take a few moments to explain why YOU should study and invest your time into reverse engineering. Please take a moment to read the following and then, hopefully, decide whether this […]

Welcome back to my Reverse Engineering Malware series. In general, reverse engineering of malware is done on Windows systems. That’s because despite recent inroads by Linux and the Mac OS, Windows systems still comprise over 90% of all computing systems in the world. As such, well over 90% of malware is designed to compromise Windows […]

Welcome back to my Reverse Engineering Malware course! This course is designed for those of you who want to ascend to the pinnacle of Digital Forensics and Cyber Security. There are many tools available for reverse engineering, but one disassembler stands alone. Nearly everyone in this industry uses IDA Pro to some extent. IDA Pro […]

The recent CIA data dump from Wikileaks named Vault7, reveals many things about the CIA’s cyber intelligence efforts. For my part, the revelation that much of the malicious code that the CIA uses to spy on foreign nationals from around the world, uses “snippets” of code from known public malware was among one of the […]