README.md

Meta

The Book: http://www.nostarch.com/malware

Download Labs: http://practicalmalwareanalysis.com/labs/

Puzzles: 57 labs containing 315 questions.

Chapter 1: Basic Static Techniques

• Lab 1.1 (7)

• Lab 1.2 (4)

• Lab 1.3 (4)

• Lab 1.4 (6)

Chapter 2: Malware Analysis in Virtual Machines

• No labs for this chapter.

Chapter 3: Basic Dynamic Analysis

• Lab 3.1 (3)

• Lab 3.2 (6)

• Lab 3.3 (4)

• Lab 3.4 (3)

Chapter 4: A Crash Course in x86 Disassembly

• No labs for this chapter.

Chapter 5: IDA Pro

• Lab 5.1 (21)

Chapter 6: Recognizing C Code Constructs in Assembly

• Lab 6.1 (3)

• Lab 6.2 (6)

• Lab 6.3 (6)

• Lab 6.4 (6)

Chapter 7: Analyzing Malicious Windows Programs

• Lab 7.1 (6)

• Lab 7.2 (3)

• Lab 7.3 (4)

Chapter 8: Debugging

• No labs for this chapter.

Chapter 9: OllyDbg

• Lab 9.1 (6)

• Lab 9.2 (8)

• Lab 9.3 (8)

Chapter 10: Kernel Debugging with WinDbg

• Lab 10.1 (3)

• Lab 10.2 (3)

• Lab 10.3 (3)

Chapter 11: Malware Behavior

• Lab 11.1 (5)

• Lab 11.2 (9)

• Lab 11.3 (6)

Chapter 12: Covert Malware Launching

• Lab 12.1 (4)

• Lab 12.2 (5)

• Lab 12.3 (3)

• Lab 12.4 (6)

Chapter 13: Data Encoding

• Lab 13.1 (9)

• Lab 13.2 (7)

• Lab 13.3 (8)

Chapter 14: Malware Focused Network Signatures

• Lab 14.1 (8)

• Lab 14.2 (9)

• Lab 14.3 (9)

Chapter 15: Anti-Disassembly

• Lab 15.1 (4)

• Lab 15.2 (4)

• Lab 15.3 (4)

Chapter 16: Anti-Debugging

• Lab 16.1 (5)

• Lab 16.2 (11)

• Lab 16.3 (7)

Chapter 17: Anti-Virtual Machine Techniques

• Lab 17.1 (6)

• Lab 17.2 (7)

• Lab 17.3 (5)

Chapter 18: Packers and Unpacking

• Lab 18.1 (1)

• Lab 18.2 (1)

• Lab 18.3 (1)

• Lab 18.4 (1)

• Lab 18.5 (1)

Chapter 19: Shellcode Analysis

• Lab 19.1 (5)

• Lab 19.2 (6)

• Lab 19.3 (5)

Chapter 20: C++ Analaysis

• Lab 20.1 (3)

• Lab 20.2 (7)

• Lab 20.3 (5)

Chapter 21: 64-Bit Malware

• Lab 21.1 (7)

• Lab 21.2 (8)