Mastering Malware Analysis: The complete malware analyst's guide to combating malicious software, APT, cybercrime, and IoT attacks - Softcover

Kleymenov, Alexey; Thabet, Amr

Softcover

ISBN 10: 1789610788 ISBN 13: 9781789610789

Publisher: Packt Publishing, 2019

Synopsis

Master malware analysis to protect your systems from getting infected

Key Features

• Set up and model solutions, investigate malware, and prevent it from occurring in future
• Learn core concepts of dynamic malware analysis, memory forensics, decryption, and much more
• A practical guide to developing innovative solutions to numerous malware incidents

Book Description

With the ever-growing proliferation of technology, the risk of encountering malicious code or malware has also increased. Malware analysis has become one of the most trending topics in businesses in recent years due to multiple prominent ransomware attacks. Mastering Malware Analysis explains the universal patterns behind different malicious software types and how to analyze them using a variety of approaches. You will learn how to examine malware code and determine the damage it can possibly cause to your systems to ensure that it won't propagate any further. Moving forward, you will cover all aspects of malware analysis for the Windows platform in detail. Next, you will get to grips with obfuscation and anti-disassembly, anti-debugging, as well as anti-virtual machine techniques. This book will help you deal with modern cross-platform malware. Throughout the course of this book, you will explore real-world examples of static and dynamic malware analysis, unpacking and decrypting, and rootkit detection. Finally, this book will help you strengthen your defenses and prevent malware breaches for IoT devices and mobile platforms. By the end of this book, you will have learned to effectively analyze, investigate, and build innovative solutions to handle any malware incidents.

What you will learn

• Explore widely used assembly languages to strengthen your reverse-engineering skills
• Master different executable file formats, programming languages, and relevant APIs used by attackers
• Perform static and dynamic analysis for multiple platforms and file types
• Get to grips with handling sophisticated malware cases
• Understand real advanced attacks, covering all stages from infiltration to hacking the system
• Learn to bypass anti-reverse engineering techniques

Who this book is for

If you are an IT security administrator, forensic analyst, or malware researcher looking to secure against malicious software or investigate malicious code, this book is for you. Prior programming experience and a fair understanding of malware attacks and investigation is expected.

Table of Contents

1. A Crash Course in CISC & RISC Assembly and Basics of Computer Programming
2. Basic Static and Dynamic Analysis for x86/x64
3. Unpacking, Decryption and Deobfuscation
4. Inspecting Process Injection & API Hooking
5. Bypassing Anti-Reverse Engineering Techniques
6. Understanding Kernel-Mode & Rootkits
7. Handling Exploits & Shellcode
8. Reversing Bytecode Languages: DotNet, Java and More
9. Scripts & Macros: Reversing, Deobfuscation and Debugging
10. Dissecting Linux and IoT Malware
11. Intro to MacOS and iOS Threats
12. Analyzing Android Malware Samples

About this title

About the Author

Alexey Kleymenov started working in the information security industry in his second year at university, and now has more than 10 years of practical experience at three international antivirus companies. He is an IT engineer with a strong security background and is passionate about reverse engineering, prototyping, process automation, and research. Alexey has taken part in numerous e-crime and targeted attack-related investigations, has worked on several projects that involved building machine learning classifiers to detect various types of attacks, and has developed several applications that extend the visibility of modern threats in the IoT domain. Alexey is also a member of the (ISC)² organization and holds the CISSP certification.

Amr Thabet is a former malware researcher at Symantec and the founder of MalTrak. Amr has spoken at top security conferences all around the world, including DEFCON and VB Conference. He was also featured in Christian Science Monitor for his work on Stuxnet.

Prior to that, he struggled to get into the field as he was a mechanical engineer graduate. he didn't have the budget to afford expensive certificates to prove his skills. And because of that, after his successes, he decided to be the inspiring voice to all enthusiasts starting in malware analysis. he helps students all around the world to build their expertise and most importantly, their irresistible resume to land their next malware analysis job.

Edition details

• Publisher: Packt Publishing
• Publication date: 2019
• Language: English
• ISBN 10: 1789610788
• ISBN 13: 9781789610789
• Binding: Paperback
• Number of pages: 562