Malware Analysis
Static analysis, PE headers, Windows APIs, strings, and process-injection tradecraft.
Advanced Static Analysis
Deep dive into advanced static analysis techniques including IDA Pro disassembly, Ghidra decompilation, and identifying malicious code patterns without executing the binary.
Malware API Reference
Analysis of common Windows API calls used by malware for file operations, process manipulation, registry modifications, and network communication.
MD5 Hash Verification
Using MD5 hashes for malware identification and verification, including command-line tools and online lookup databases like VirusTotal.
PE Header Analysis
Analyzing Portable Executable headers including DOS header, COFF header, optional header, section tables, Import Address Table, and detecting packed binaries.
PROCESS INJECTION
Comprehensive overview of process injection techniques including DLL injection, process hollowing, APC injection, and thread execution hijacking.
SHA-256 Hash Verification
Using SHA256 hashes for malware sample verification and identification, including cross-referencing with threat intelligence databases.
Strings Extraction & Analysis
Extracting and analyzing strings from malware samples using the strings utility and FLOSS for deobfuscating encoded or obfuscated strings.
WINDOWS API
Reference guide for Windows API functions commonly encountered in malware analysis, covering kernel32.dll, ntdll.dll, and user32.dll function families.