Practical Malware Analysis

Posted: March 3, 2012 in Practical Malware Analysis
Tags:

Malware analysis is big business, and attacks can cost a company dearly. When malware breaches your defenses, you need to act quickly to cure current infections and prevent future ones from occurring.

For those who want to stay ahead of the latest malware, Practical Malware Analysis will teach you the tools and techniques used by professional analysts. With this book as your guide, you’ll be able to safely analyze, debug, and disassemble any malicious software that comes your way.

You’ll learn how to:

  • Set up a safe virtual environment to analyze malware
  • Quickly extract network signatures and host-based indicators
  • Use key analysis tools like IDA Pro, OllyDbg, and WinDbg
  • Overcome malware tricks like obfuscation, anti-disassembly, anti-debugging, and anti-virtual machine techniques
  • Use your newfound knowledge of Windows internals for malware analysis
  • Develop a methodology for unpacking malware and get practical experience with five of the most popular packers
  • Analyze special cases of malware with shellcode, C++, and 64-bit code
  • Table of Contents

Introduction
Chapter 0: Malware Analysis Primer

Part 1: Basic Analysis
Chapter 1: Basic Static Techniques
Chapter 2: Malware Analysis in Virtual Machines
Chapter 3: Basic Dynamic Analysis

Part 2: Advanced Static Analysis
Chapter 4: A Crash Course in x86 Disassembly
Chapter 5: IDA Pro
Chapter 6: Recognizing C Code Constructs in Assembly
Chapter 7: Analyzing Malicious Windows Programs

Part 3: Advanced Dynamic Analysis
Chapter 8: Debugging
Chapter 9: OllyDbg
Chapter 10: Kernel Debugging with WinDbg

Part 4: Malware Functionality
Chapter 11: Malware Behavior
Chapter 12: Covert Malware Launching
Chapter 13: Data Encoding
Chapter 14: Malware-Focused Network Signatures

Part 5: Anti-Reverse-Engineering
Chapter 15: Anti-Disassembly
Chapter 16: Anti-Debugging
Chapter 17: Anti-Virtual Machine Techniques
Chapter 18: Packers and Unpacking

Part 6: Special Topics
Chapter 19: Shellcode Analysis
Chapter 20: C++ Analysis
Chapter 21: 64-Bit Malware

Appendix A: Important Windows Functions
Appendix B: Tools for Malware Analysis
Appendix C: Solutions to Labs

Download here:

http://www.mediafire.com/?tvtp54ls0dozv6b

Best Regards

Advertisements
Comments
  1. quygia128 says:

    Hi anh Kiên.
    Em kiếm cuốn này hoài mà không được, vô tình em follow blog của anh. Nhận được Email là nhàu vô sơ liền :D.
    Xin cảm ơn anh vì quyển sách này.

    PS: Ah sao anh Kiên không thêm cái thẻ “target=_new” vô cho link nó mở tad mới nhỉ. Khi nhấp vào link download thì phải rời khỏi blog. Phải bấm quay lại để xem. Cái này thì không sao nhưng nếu trong bài viết dài mà mà anh có trích dẫn link từ nơi khác nếu như thế này thì cứ bấm quay tới quay lui 😀

  2. kienmanowar says:

    @quygia128: Ok em, anh đã sửa lại link theo comment của em :). Sẽ cố gắng tìm kiếm và cập nhật những tài liệu hay.

    Regards

  3. bolzano_1989 says:

    Anh Kiên thường đọc ở trang nào để cập nhật ebook hay thế vậy anh :)?

  4. ducdat2411 says:

    Em cũng đang đọc và dịch cuốn này. Cảm ơn anh Kiên nhé!!!

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

This site uses Akismet to reduce spam. Learn how your comment data is processed.