'Practical Malware Analysis' will teach you the tools and techniques used by professional analysts. With this book as your guide, you'll be able to analyze, debug, and disassemble any malicious software that comes your way.
You'll learn how to - Set up a safe virtual environment to analyze malware; Quickly extract network signatures and host-based indicators; Use key analysis tools like IDA Pro, OllyDbg, and WinDbg; Overcome malware tricks like obfuscation, anti-disassembly, anti-debugging, and anti-virtual machine techniques; Use your newfound knowledge of Windows internals for malware analysis; Develop a methodology for unpacking malware and get practical experience with five of the most popular packers; Analyze special cases of malware with shellcode, C++, and 64-bit code.
Hands-on labs throughout the book challenge you to practice and synthesize your skills as you dissect real malware samples, and pages of detailed dissections offer an over-the-shoulder look at how the pros do it. You'll learn how to crack open malware to see how it really works, determine what damage it has done, thoroughly clean your network, and ensure that the malware never comes back.