practical-malware-analysis icon indicating copy to clipboard operation
practical-malware-analysis copied to clipboard

Exercise writeups from the book Practical Malware Analysis.

Meta

The Book: http://www.nostarch.com/malware

Download Labs: http://practicalmalwareanalysis.com/labs/

Puzzles: 57 labs containing 315 questions.

Chapter 1: Basic Static Techniques

  • Lab 1.1 (7)

  • Lab 1.2 (4)

  • Lab 1.3 (4)

  • Lab 1.4 (6)

Chapter 2: Malware Analysis in Virtual Machines

  • No labs for this chapter.

Chapter 3: Basic Dynamic Analysis

  • Lab 3.1 (3)

  • Lab 3.2 (6)

  • Lab 3.3 (4)

  • Lab 3.4 (3)

Chapter 4: A Crash Course in x86 Disassembly

  • No labs for this chapter.

Chapter 5: IDA Pro

  • Lab 5.1 (21)

Chapter 6: Recognizing C Code Constructs in Assembly

  • Lab 6.1 (3)

  • Lab 6.2 (6)

  • Lab 6.3 (6)

  • Lab 6.4 (6)

Chapter 7: Analyzing Malicious Windows Programs

  • Lab 7.1 (6)

  • Lab 7.2 (3)

  • Lab 7.3 (4)

Chapter 8: Debugging

  • No labs for this chapter.

Chapter 9: OllyDbg

  • Lab 9.1 (6)

  • Lab 9.2 (8)

  • Lab 9.3 (8)

Chapter 10: Kernel Debugging with WinDbg

  • Lab 10.1 (3)

  • Lab 10.2 (3)

  • Lab 10.3 (3)

Chapter 11: Malware Behavior

  • Lab 11.1 (5)

  • Lab 11.2 (9)

  • Lab 11.3 (6)

Chapter 12: Covert Malware Launching

  • Lab 12.1 (4)

  • Lab 12.2 (5)

  • Lab 12.3 (3)

  • Lab 12.4 (6)

Chapter 13: Data Encoding

  • Lab 13.1 (9)

  • Lab 13.2 (7)

  • Lab 13.3 (8)

Chapter 14: Malware Focused Network Signatures

  • Lab 14.1 (8)

  • Lab 14.2 (9)

  • Lab 14.3 (9)

Chapter 15: Anti-Disassembly

  • Lab 15.1 (4)

  • Lab 15.2 (4)

  • Lab 15.3 (4)

Chapter 16: Anti-Debugging

  • Lab 16.1 (5)

  • Lab 16.2 (11)

  • Lab 16.3 (7)

Chapter 17: Anti-Virtual Machine Techniques

  • Lab 17.1 (6)

  • Lab 17.2 (7)

  • Lab 17.3 (5)

Chapter 18: Packers and Unpacking

  • Lab 18.1 (1)

  • Lab 18.2 (1)

  • Lab 18.3 (1)

  • Lab 18.4 (1)

  • Lab 18.5 (1)

Chapter 19: Shellcode Analysis

  • Lab 19.1 (5)

  • Lab 19.2 (6)

  • Lab 19.3 (5)

Chapter 20: C++ Analaysis

  • Lab 20.1 (3)

  • Lab 20.2 (7)

  • Lab 20.3 (5)

Chapter 21: 64-Bit Malware

  • Lab 21.1 (7)

  • Lab 21.2 (8)