securityxploded, profile picture
Uploaded bysecurityxploded
PPTX, PDF28,731 views

Reversing & malware analysis training part 1 lab setup guide

The document provides a disclaimer regarding the content and source code related to reverse engineering and malware analysis training offered by SecurityXploded, specifying that it is presented 'as is' without warranty. It acknowledges the contributions of the trainers and communities, outlines the training program's focus on essential tools and techniques, and lists various tools used for virtualization, development, and reverse engineering. The document serves as a guide for participants in the training course, detailing resources and tools relevant for effective analysis.

Technology◦
Related topics:
Reverse Engineering•

Embed presentation

Downloaded 167 times
www.SecurityXploded.com
Disclaimer The Content, Demonstration, Source Code and Programs presented here is "AS IS" without any warranty or conditions of any kind. Also the views/ideas/knowledge expressed here are solely of the trainer’s only and nothing to do with the company or the organization in which the trainer is currently working. However in no circumstances neither the trainer nor SecurityXploded is responsible for any damage or loss caused due to use or misuse of the information presented here. www.SecurityXploded.com
Acknowledgement  Special thanks to null & Garage4Hackers community for their extended support and cooperation.  Thanks to all the trainers who have devoted their precious time and countless hours to make it happen. www.SecurityXploded.com
Reversing & Malware Analysis Training This presentation is part of our Reverse Engineering & Malware Analysis Training program. Currently it is delivered only during our local meet for FREE of cost. For complete details of this course, visit our Security Training page. www.SecurityXploded.com
Who am I #1 Amit Malik (sometimes DouBle_Zer0,DZZ)  Member SecurityXploded & Garage4Hackers  Security Researcher  RE, Exploit Analysis/Development, Malware Analysis  Email: m.amit30@gmail.com www.SecurityXploded.com
Who am I #2 Swapnil Pathak  Member SecurityXploded  Security Researcher  RE, Malware Analysis, Network Security  Email: swapnilpathak101@gmail.com www.SecurityXploded.com
Introduction  This Guide is specific to our course  Although it will cover most of the tools and techniques for an analysis environment  Our main focus is on the famous tools www.SecurityXploded.com
Virtualization  Run multiple OS on the single hardware at the same time.  Advanced functionalities like Snapshot, Revert Back, pause etc.  Automation  Controlled environment www.SecurityXploded.com
Virtualization Tools  VmWare (Commercial)  VirtualBox (Open Source – free)  Images – XpSp2, XpSp3 www.SecurityXploded.com
VmWare Image www.SecurityXploded.com
VirtualBox Image www.SecurityXploded.com
Tools Development  Compiler/IDE  Dev C++ (Free) - preferred  Microsoft Visual C++ (Commercial)  Assemblers  MASM (Free) -preferred  NASM (Free)  Winasm (IDE) (Free)  Interpreters  Python (Free) www.SecurityXploded.com
Tools Reverse Engg.  Disassembler:  IDA Pro (Download free version)  Debuggers  Ollydbg  Immunity Debugger  Windbg  Pydbg (optional) www.SecurityXploded.com
Tools Reverse Engg. Cont.  PE file Format  PEview, PEbrowse, LordPE, ImpRec, Peid, ExeScan  Process Related  ProcMon, Process explorer  Network Related  Wireshark, TcpDump, Tshark, TCPView  File, Registry Related  Regshot, filemon, InstallwatchPro, CaptureBat www.SecurityXploded.com
Tools Reverse Engg. Cont.  Misc.  CFFExplorer, Notepad++, Dependency Walker, Sysinternal tools  If something additional is required then we will cover that in the respective lecture www.SecurityXploded.com
Reference  Complete Reference Guide for Reversing & Malware Analysis Training www.SecurityXploded.com
Thank You ! www.SecurityXploded.com

More Related Content

PPTX
Reversing & Malware Analysis Training Part 9 - Advanced Malware Analysis
bysecurityxploded
 
PPTX
Advanced Malware Analysis Training Session 2 - Botnet Analysis Part 1
bysecurityxploded
 
PPTX
Advanced Malware Analysis Training Session 1 - Detection and Removal of Malwares
bysecurityxploded
 
PPTX
Anti-Virus Evasion Techniques and Countermeasures
byn|u - The Open Security Community
 
PPTX
Advanced Malware Analysis Training Session 6 - Malware Sandbox Analysis
bysecurityxploded
 
PPTX
Advanced Malware Analysis Training Session 5 - Reversing Automation
bysecurityxploded
 
PPTX
Advanced Malware Analysis Training Session 7 - Malware Memory Forensics
bysecurityxploded
 
PPTX
Advanced Malware Analysis Training Session 3 - Botnet Analysis Part 2
bysecurityxploded
 
Reversing & Malware Analysis Training Part 9 - Advanced Malware Analysis
bysecurityxploded
 
Advanced Malware Analysis Training Session 2 - Botnet Analysis Part 1
bysecurityxploded
 
Advanced Malware Analysis Training Session 1 - Detection and Removal of Malwares
bysecurityxploded
 
Anti-Virus Evasion Techniques and Countermeasures
byn|u - The Open Security Community
 
Advanced Malware Analysis Training Session 6 - Malware Sandbox Analysis
bysecurityxploded
 
Advanced Malware Analysis Training Session 5 - Reversing Automation
bysecurityxploded
 
Advanced Malware Analysis Training Session 7 - Malware Memory Forensics
bysecurityxploded
 
Advanced Malware Analysis Training Session 3 - Botnet Analysis Part 2
bysecurityxploded
 

What's hot

PPTX
Reversing & malware analysis training part 2 introduction to windows internals
bysecurityxploded
 
PPTX
Reversing & Malware Analysis Training Part 13 - Future Roadmap
bysecurityxploded
 
PPTX
Application Virtualization
bysecurityxploded
 
PPTX
Advanced malware analysis training session 7 malware memory forensics
byCysinfo Cyber Security Community
 
PPTX
Reversing & malware analysis training part 3 windows pe file format basics
bysecurityxploded
 
PPTX
Reversing malware analysis training part7 unpackingupx
byCysinfo Cyber Security Community
 
PPTX
Advanced Malware Analysis Training Session 4 - Anti-Analysis Techniques
bysecurityxploded
 
PPTX
Anatomy of Exploit Kits
bysecurityxploded
 
PPTX
Primer on password security
bysecurityxploded
 
PPTX
Reversing malware analysis training part6 practical reversing
byCysinfo Cyber Security Community
 
PPTX
Advanced Malware Analysis Training Session 8 - Introduction to Android
bysecurityxploded
 
PPTX
Advanced malware analysis training session8 introduction to android
byCysinfo Cyber Security Community
 
PPTX
Advanced malware analysis training session5 reversing automation
byCysinfo Cyber Security Community
 
PPTX
Reversing malware analysis training part11 exploit development advanced
byCysinfo Cyber Security Community
 
PPTX
Reversing & Malware Analysis Training Part 11 - Exploit Development [Advanced]
bysecurityxploded
 
PPTX
Advanced Malware Analysis Training Session 11 - (Part 2) Dissecting the Heart...
bysecurityxploded
 
PPTX
Advanced malwareanalysis training session2 botnet analysis part1
byCysinfo Cyber Security Community
 
PPTX
Hunting Rootkit From the Dark Corners Of Memory
bysecurityxploded
 
PPTX
Defeating public exploit protections (EMET v5.2 and more)
bysecurityxploded
 
PPTX
Reversing & Malware Analysis Training Part 6 - Practical Reversing (I)
bysecurityxploded
 
Reversing & malware analysis training part 2 introduction to windows internals
bysecurityxploded
 
Reversing & Malware Analysis Training Part 13 - Future Roadmap
bysecurityxploded
 
Application Virtualization
bysecurityxploded
 
Advanced malware analysis training session 7 malware memory forensics
byCysinfo Cyber Security Community
 
Reversing & malware analysis training part 3 windows pe file format basics
bysecurityxploded
 
Reversing malware analysis training part7 unpackingupx
byCysinfo Cyber Security Community
 
Advanced Malware Analysis Training Session 4 - Anti-Analysis Techniques
bysecurityxploded
 
Anatomy of Exploit Kits
bysecurityxploded
 
Primer on password security
bysecurityxploded
 
Reversing malware analysis training part6 practical reversing
byCysinfo Cyber Security Community
 
Advanced Malware Analysis Training Session 8 - Introduction to Android
bysecurityxploded
 
Advanced malware analysis training session8 introduction to android
byCysinfo Cyber Security Community
 
Advanced malware analysis training session5 reversing automation
byCysinfo Cyber Security Community
 
Reversing malware analysis training part11 exploit development advanced
byCysinfo Cyber Security Community
 
Reversing & Malware Analysis Training Part 11 - Exploit Development [Advanced]
bysecurityxploded
 
Advanced Malware Analysis Training Session 11 - (Part 2) Dissecting the Heart...
bysecurityxploded
 
Advanced malwareanalysis training session2 botnet analysis part1
byCysinfo Cyber Security Community
 
Hunting Rootkit From the Dark Corners Of Memory
bysecurityxploded
 
Defeating public exploit protections (EMET v5.2 and more)
bysecurityxploded
 
Reversing & Malware Analysis Training Part 6 - Practical Reversing (I)
bysecurityxploded
 

Similar to Reversing & malware analysis training part 1 lab setup guide

PPTX
Reversing malware analysis training part1 lab setup guide
byCysinfo Cyber Security Community
 
PPTX
Basic malware analysis
bysecurityxploded
 
PPTX
Malware 101 by saurabh chaudhary
bySaurav Chaudhary
 
PPTX
Basic malware analysis
byCysinfo Cyber Security Community
 
PDF
Intro2 malwareanalysisshort
byVincent Ohprecio
 
PDF
Malware analysis and detection using reverse Engineering, Available at: www....
byResearch Publish Journals (Publisher)
 
PDF
Malware Analysis -an overview by PP Singh
byn|u - The Open Security Community
 
PDF
Reversing Engineer: Dissecting a "Client Side" Vulnerability in the APT era
byNelson Brito
 
PDF
Reversing & malware analysis training part 1 lab setup guide
byAbdulrahman Bassam
 
PDF
Reversing & malware analysis training part 5 reverse engineering tools basics
byAbdulrahman Bassam
 
PDF
Reversing & malware analysis training part 12 rootkit analysis
byAbdulrahman Bassam
 
PDF
Reversing & malware analysis training part 8 malware memory forensics
byAbdulrahman Bassam
 
PDF
Reversing & malware analysis training part 2 introduction to windows internals
byAbdulrahman Bassam
 
PDF
Reversing & malware analysis training part 9 advanced malware analysis
byAbdulrahman Bassam
 
PDF
Advanced Malware Analysis Training - Detection and Removal of Malwares
byn|u - The Open Security Community
 
PPTX
The Hacking Games - Operation System Vulnerabilities Meetup 29112022
bylior mazor
 
PDF
Inception: A reverse-engineer horror History
byNelson Brito
 
PDF
Reversing and Malware Analysis
byE Hacking
 
PDF
A client-side vulnerability under the microscope!
byNelson Brito
 
PDF
'Malware Analysis' by PP Singh
byBipin Upadhyay
 
Reversing malware analysis training part1 lab setup guide
byCysinfo Cyber Security Community
 
Basic malware analysis
bysecurityxploded
 
Malware 101 by saurabh chaudhary
bySaurav Chaudhary
 
Basic malware analysis
byCysinfo Cyber Security Community
 
Intro2 malwareanalysisshort
byVincent Ohprecio
 
Malware analysis and detection using reverse Engineering, Available at: www....
byResearch Publish Journals (Publisher)
 
Malware Analysis -an overview by PP Singh
byn|u - The Open Security Community
 
Reversing Engineer: Dissecting a "Client Side" Vulnerability in the APT era
byNelson Brito
 
Reversing & malware analysis training part 1 lab setup guide
byAbdulrahman Bassam
 
Reversing & malware analysis training part 5 reverse engineering tools basics
byAbdulrahman Bassam
 
Reversing & malware analysis training part 12 rootkit analysis
byAbdulrahman Bassam
 
Reversing & malware analysis training part 8 malware memory forensics
byAbdulrahman Bassam
 
Reversing & malware analysis training part 2 introduction to windows internals
byAbdulrahman Bassam
 
Reversing & malware analysis training part 9 advanced malware analysis
byAbdulrahman Bassam
 
Advanced Malware Analysis Training - Detection and Removal of Malwares
byn|u - The Open Security Community
 
The Hacking Games - Operation System Vulnerabilities Meetup 29112022
bylior mazor
 
Inception: A reverse-engineer horror History
byNelson Brito
 
Reversing and Malware Analysis
byE Hacking
 
A client-side vulnerability under the microscope!
byNelson Brito
 
'Malware Analysis' by PP Singh
byBipin Upadhyay
 

More from securityxploded

PPTX
Hunting Ghost RAT Using Memory Forensics
bysecurityxploded
 
PPTX
Watering Hole Attacks Case Study and Analysis_SecurityXploded_Meet_june14
bysecurityxploded
 
PPTX
Automating Malware Analysis
bysecurityxploded
 
PDF
Understanding CryptoLocker (Ransomware) with a Case Study
bysecurityxploded
 
PPTX
MalwareNet Project
bysecurityxploded
 
PPTX
Reversing and Decrypting the Communications of APT Malware (Etumbot)
bysecurityxploded
 
PPTX
DLL Preloading Attack
bysecurityxploded
 
PPTX
Dissecting BetaBot
bysecurityxploded
 
PPTX
Malicious Url Detection Using Machine Learning
bysecurityxploded
 
PPTX
Reverse Engineering Malware
bysecurityxploded
 
PPTX
Bluetooth [in]security
bysecurityxploded
 
PPTX
Partial Homomorphic Encryption
bysecurityxploded
 
PPT
Introduction to SMPC
bysecurityxploded
 
PPTX
Breaking into hospitals
bysecurityxploded
 
PDF
Linux Malware Analysis using Limon Sandbox
bysecurityxploded
 
PPTX
Return Address – The Silver Bullet
bysecurityxploded
 
PPTX
Malicious Client Detection Using Machine Learning
bysecurityxploded
 
PDF
Buffer Overflow Attacks
bysecurityxploded
 
PPTX
Fingerprinting healthcare institutions
bysecurityxploded
 
PDF
Hollow Process Injection - Reversing and Investigating Malware Evasive Tactics
bysecurityxploded
 
Hunting Ghost RAT Using Memory Forensics
bysecurityxploded
 
Watering Hole Attacks Case Study and Analysis_SecurityXploded_Meet_june14
bysecurityxploded
 
Automating Malware Analysis
bysecurityxploded
 
Understanding CryptoLocker (Ransomware) with a Case Study
bysecurityxploded
 
MalwareNet Project
bysecurityxploded
 
Reversing and Decrypting the Communications of APT Malware (Etumbot)
bysecurityxploded
 
DLL Preloading Attack
bysecurityxploded
 
Dissecting BetaBot
bysecurityxploded
 
Malicious Url Detection Using Machine Learning
bysecurityxploded
 
Reverse Engineering Malware
bysecurityxploded
 
Bluetooth [in]security
bysecurityxploded
 
Partial Homomorphic Encryption
bysecurityxploded
 
Introduction to SMPC
bysecurityxploded
 
Breaking into hospitals
bysecurityxploded
 
Linux Malware Analysis using Limon Sandbox
bysecurityxploded
 
Return Address – The Silver Bullet
bysecurityxploded
 
Malicious Client Detection Using Machine Learning
bysecurityxploded
 
Buffer Overflow Attacks
bysecurityxploded
 
Fingerprinting healthcare institutions
bysecurityxploded
 
Hollow Process Injection - Reversing and Investigating Malware Evasive Tactics
bysecurityxploded
 

Recently uploaded

PDF
Run Containers in RHEL - RHCSA (RH134).pdf
byLinuxCert Guru
 
PDF
Flatpak CLI Application Management & Building on RHEL.pdf
byLinuxCert Guru
 
PDF
The Future of Database Diagnostics is a Conversation with Oracle AHF Fleet In...
bySandesh Rao
 
PPTX
How Design Systems and AI Agents Accelerate Product Delivery Sixt
byBoyan Dimitrov
 
PDF
Getting started with Agent Framework.pdf
byNilesh Gule
 
PPTX
Discover - Assemble - and Gain Insights into your Content with SharePoint Con...
byDrew Madelung
 
PDF
Manage Network Security (Firewall) in RHEL - RHCSA (RH134).pdf
byLinuxCert Guru
 
PPTX
Opening Plenary - Esri UK Welsh Conference 2025
byEsri UK
 
PDF
#MakeAIMatter for HR Professionals | AI Transformation Workshop by Tekdi Tech...
byParth Lawate
 
PPTX
Explaining ourselves – people, computers and AI
byAlan Dix
 
PDF
The Accel 2025 Globalscape: Race for compute
byPhilippe Botteri
 
PDF
Upskill to Agentic Automation - Accelerating Your Job Search using AI
byDianaGray10
 
PDF
Create or Remove files and directories - RHCE.pdf
byLinuxCert Guru
 
PPTX
Standardising and simplifying systems and data management - Esri UK Welsh Con...
byEsri UK
 
PPTX
Understanding the digital experience of FE teaching staff in 2024/25
byJisc
 
PDF
Building Powerful Web Apps to Improve Productivity and Engagement - Esri UK W...
byEsri UK
 
PDF
OutSystsems User Group Brabant November 2025
bymail496323
 
PDF
IDSECCONF2025 - Nosa Shandy - Discovering and Disclosing Privacy Vulnerabilit...
byidsecconf
 
PDF
Sylvester Konadu Worcester MA - An Accomplished IT Analyst
bySylvester Konadu Worcester
 
PDF
Agile Trailblazers (Scrum Masters, Product Owners, Coaches, Project Managers,...
byScott M. Graffius
 
Run Containers in RHEL - RHCSA (RH134).pdf
byLinuxCert Guru
 
Flatpak CLI Application Management & Building on RHEL.pdf
byLinuxCert Guru
 
The Future of Database Diagnostics is a Conversation with Oracle AHF Fleet In...
bySandesh Rao
 
How Design Systems and AI Agents Accelerate Product Delivery Sixt
byBoyan Dimitrov
 
Getting started with Agent Framework.pdf
byNilesh Gule
 
Discover - Assemble - and Gain Insights into your Content with SharePoint Con...
byDrew Madelung
 
Manage Network Security (Firewall) in RHEL - RHCSA (RH134).pdf
byLinuxCert Guru
 
Opening Plenary - Esri UK Welsh Conference 2025
byEsri UK
 
#MakeAIMatter for HR Professionals | AI Transformation Workshop by Tekdi Tech...
byParth Lawate
 
Explaining ourselves – people, computers and AI
byAlan Dix
 
The Accel 2025 Globalscape: Race for compute
byPhilippe Botteri
 
Upskill to Agentic Automation - Accelerating Your Job Search using AI
byDianaGray10
 
Create or Remove files and directories - RHCE.pdf
byLinuxCert Guru
 
Standardising and simplifying systems and data management - Esri UK Welsh Con...
byEsri UK
 
Understanding the digital experience of FE teaching staff in 2024/25
byJisc
 
Building Powerful Web Apps to Improve Productivity and Engagement - Esri UK W...
byEsri UK
 
OutSystsems User Group Brabant November 2025
bymail496323
 
IDSECCONF2025 - Nosa Shandy - Discovering and Disclosing Privacy Vulnerabilit...
byidsecconf
 
Sylvester Konadu Worcester MA - An Accomplished IT Analyst
bySylvester Konadu Worcester
 
Agile Trailblazers (Scrum Masters, Product Owners, Coaches, Project Managers,...
byScott M. Graffius
 

Reversing & malware analysis training part 1 lab setup guide

  • 1.
  • 2.
    Disclaimer The Content, Demonstration,Source Code and Programs presented here is "AS IS" without any warranty or conditions of any kind. Also the views/ideas/knowledge expressed here are solely of the trainer’s only and nothing to do with the company or the organization in which the trainer is currently working. However in no circumstances neither the trainer nor SecurityXploded is responsible for any damage or loss caused due to use or misuse of the information presented here. www.SecurityXploded.com
  • 3.
    Acknowledgement  Special thanksto null & Garage4Hackers community for their extended support and cooperation.  Thanks to all the trainers who have devoted their precious time and countless hours to make it happen. www.SecurityXploded.com
  • 4.
    Reversing & MalwareAnalysis Training This presentation is part of our Reverse Engineering & Malware Analysis Training program. Currently it is delivered only during our local meet for FREE of cost. For complete details of this course, visit our Security Training page. www.SecurityXploded.com
  • 5.
    Who am I#1 Amit Malik (sometimes DouBle_Zer0,DZZ)  Member SecurityXploded & Garage4Hackers  Security Researcher  RE, Exploit Analysis/Development, Malware Analysis  Email: m.amit30@gmail.com www.SecurityXploded.com
  • 6.
    Who am I#2 Swapnil Pathak  Member SecurityXploded  Security Researcher  RE, Malware Analysis, Network Security  Email: swapnilpathak101@gmail.com www.SecurityXploded.com
  • 7.
    Introduction  This Guide is specific to our course  Although it will cover most of the tools and techniques for an analysis environment  Our main focus is on the famous tools www.SecurityXploded.com
  • 8.
    Virtualization  Run multiple OS on the single hardware at the same time.  Advanced functionalities like Snapshot, Revert Back, pause etc.  Automation  Controlled environment www.SecurityXploded.com
  • 9.
    Virtualization Tools  VmWare (Commercial)  VirtualBox (Open Source – free)  Images – XpSp2, XpSp3 www.SecurityXploded.com
  • 10.
    VmWare Image www.SecurityXploded.com
  • 11.
    VirtualBox Image www.SecurityXploded.com
  • 12.
    Tools Development  Compiler/IDE  Dev C++ (Free) - preferred  Microsoft Visual C++ (Commercial)  Assemblers  MASM (Free) -preferred  NASM (Free)  Winasm (IDE) (Free)  Interpreters  Python (Free) www.SecurityXploded.com
  • 13.
    Tools Reverse Engg.  Disassembler:  IDA Pro (Download free version)  Debuggers  Ollydbg  Immunity Debugger  Windbg  Pydbg (optional) www.SecurityXploded.com
  • 14.
    Tools Reverse Engg.Cont.  PE file Format  PEview, PEbrowse, LordPE, ImpRec, Peid, ExeScan  Process Related  ProcMon, Process explorer  Network Related  Wireshark, TcpDump, Tshark, TCPView  File, Registry Related  Regshot, filemon, InstallwatchPro, CaptureBat www.SecurityXploded.com
  • 15.
    Tools Reverse Engg.Cont.  Misc.  CFFExplorer, Notepad++, Dependency Walker, Sysinternal tools  If something additional is required then we will cover that in the respective lecture www.SecurityXploded.com
  • 16.
    Reference  Complete Reference Guide for Reversing & Malware Analysis Training www.SecurityXploded.com
  • 17.