The Dark Side of Malware Analysis

on YouTube ↗01h 03m

" summary

The talk explains why reverse-engineering Windows executables is crucial for analyzing increasingly targeted malware, and it covers practical approaches to malware analysis including tools, analytical techniques, and dealing with protection/obfuscation mechanisms. It uses several real-world case studies to demonstrate how to approach and solve malware analysis problems requiring intuition and creativity.

AI-written summary · about

" chapters (22)

1. 0:00Introduction
2. 2:10Sony Pictures malware analysis
3. 5:40Why analyze malware
4. 8:31Reverse engineering
5. 13:01Malware architecture
6. 15:49Role of downloaders
7. 20:03Malware modules
8. 22:30Static malware analysis
9. 25:42Static analysis tools
10. 28:53Packing and analysis obstacles
11. 32:26Java static analysis
12. 36:19Dynamic malware analysis
13. 37:20Debugging and reverse engineering
14. 43:16Real-time activity monitoring
15. 46:24Malware sandboxing
16. 48:53Sandbox challenges
17. 51:17Effectiveness of analysis
18. 52:22Analysis time and complexity
19. 55:17Tracing malware source
20. 57:25Server emulation for analysis
21. 59:31Internet connection risks
22. 1:01:19Low-level and firmware attacks

" related talks

• 01h 05mThe Dark Side of Malware AnalysisAndrea Pompili · Codemotion Milan 2015
• 50mHow to Write Malware and Learn How to Fight It!Antonio Parata · HackInBo Winter Edition 2019
• 01h 03mInvestigating Malware Using Memory Forensics - A Practical ApproachMonnappa K A · Black Hat Asia 2019
• 33mBasic Malware Analysis for Incident RespondersJared Graff · BSides Tampa 2024
• 40mAnalyzing Windows Malware on Linux: Getting Started Tips and ExamplesLenny Zeltser · RSAC 2021
• 50mShall We Talk About "Malware Craftsmanship"?Sonia Seddiki, Nailya Bogrova · DevFest Nantes 2025
• 45m"Advanced Malware Threat: handling obfuscated code using..."Alexandre Borges · CONFidence 2019
• 29mA Day in the Life of a Mobile Malware Reverse EngineerSalvador Mandujano · droidcon SF 2019