Mastering Malware Analysis

Learn effective malware analysis tactics to prevent your systems from getting infected

Key Features

• Set up and model solutions, investigate malware, and prevent it from occurring in the future
• Learn core concepts of dynamic malware analysis, memory forensics, decryption, and much more
• Get practical guidance to developing innovative solutions to numerous malware incidents

Book Description

New and developing technologies inevitably bring new types of malware with them, creating a huge demand for IT professionals that can keep malware at bay. With the help of this updated edition of Mastering Malware Analysis, you'll add valuable malware prevention skills to your CV and learn how to protect your organization.

This book will familiarize you with the universal patterns behind different malicious software types and teach you how to analyze them using a variety of approaches.

You'll learn how to examine malware code and determine the damage it can possibly cause to your systems to ensure that it won't propagate any further. As you cover all aspects of malware analysis for Windows, Linux, and iOS in detail, you'll get to grips with obfuscation, anti-disassembly, anti-debugging, as well as anti-virtual machine techniques.

The skills you acquire in this cybersecurity book will help you deal with all types of modern cross-platform malware. You'll explore real-world examples of static and dynamic malware analysis, unpacking and decrypting, and rootkit detection; all to strengthen your defenses and prevent malware breaches for IoT devices and mobile platforms.

By the end of this book, you will have learned to effectively analyze, investigate, and build innovative solutions to handle any malware incidents.

What you will learn

• Explore widely used assembly languages to strengthen your reverse-engineering skills
• Master different executable file formats, programming languages, and relevant APIs used by attackers
• Discover existing and potential attack vectors, and provide detailed guidelines for Android Malware
• Learn how to analyze samples for the x86 architecture and various RISC platforms
• Perform static and dynamic analysis for multiple platforms and file types
• Get to grips with handling sophisticated malware cases
• Understand real advanced attacks, covering all stages from infiltration to hacking the system
• Learn to bypass anti-reverse engineering techniques

Who This Book Is For

If you are a malware researcher, forensic analyst, IT security administrator or anyone looking to secure against malicious software or investigate malicious code, this book is for you. While this new edition is suited to all levels of knowledge, including complete beginners, any prior exposure to programming or cyber security will help speed up your learning process.

Table of Contents

1. Cybercrime, APT Attacks & Research Strategies
2. A Crash Course in CISC/RISC and Programming Basics
3. Basic Static and Dynamic Analysis for x86/x64
4. Unpacking, Decryption, and Deobfuscation
5. Inspecting Process Injection and API Hooking
6. Bypassing Anti-Reverse Engineering Techniques
7. Understanding Kernel-Mode Rootkits
8. Handling Exploits and Shellcode
9. Reversing Bytecode Languages: .NET, Java, and More
10. Scripts and Macros: Reversing, Deobfuscation, and Debugging
11. Dissecting Linux and IoT Malware
12. Introduction to macOS and iOS Threats
13. Analyzing Android Malware Samples