WS5 - Introduction to Malware Analysis

Instructed by:  Sam Bowne  

Level of Difficulty: Beginner, Intermediate

Abstract:

Analyze malware to find indicators of compromise using static and dynamic techniques. We will analyze Windows executables at the binary level and modify them to cheat at games.  We will examine both compiled code and DOTNET executables.  We will also examine defenses to prevent memory-corruption attacks, including coding in Rust.

We will demonstrate the techniques and help attendees solve challenges.  There are dozens of hands-on projects, with a running CTF scoreboard.  Some of the projects are easy enough for beginners, and others will challenge experienced experts.  Every participant should leave with some new skills.

All materials are freely available on the Web at samsclass (dot) info and will remain available after the workshop is over.

Pre-Requisites:

Some familiarity with developing Windows applications is helpful but not required.