Malware Analysis: Identifying and Defeating Code Obfuscation from Pluralsight

Malware authors routinely utilize obfuscation techniques to complicate the analysis of their code. This course will teach you techniques for identifying and defeating code obfuscation so that key characteristics and behaviors can be identified.

Malware authors will routinely utilize obfuscation techniques to complicate the analysis of their code. These techniques can prevent the discovery of important indicators of compromise and limit the ability to determine malware functionality. In this course, Malware Analysis: Identifying and Defeating Code Obfuscation, you will gain the skills necessary to not only identify prevalent obfuscation techniques, but also how to effectively defeat them. First, you will see how obfuscation will affect your analysis and effective strategies for defeating a variety of obfuscation methods. Next, you will explore how to identify and detect obfuscation techniques in interpreted code. This includes software routinely abused by malware authors such as Powershell and Visual Basic for Applications. You will next be able to expand your skills by learning about code obfuscation in native code. Finally, you will discover how malware authors use cryptography for obfuscation and ways to detect it. Each module of this course will include detailed demonstrations and hands-on labs that will allow you to analyze real-world malware. You will be going deep into malware obfuscation techniques with such tools as IDA Pro and WinDbg. By the end of this course, you will have the knowledge and skills to effectively tackle obfuscation!

What's inside

Syllabus

Course Overview

How Obfuscation Affects Your Analysis

Detecting and Defeating Code Obfuscation in Interpreted Code

Detecting and Defeating String Obfuscation in Native Code

Detecting and Defeating Function Obfuscation in Native Code

Identifying Malware Use of Cryptography

Leveling up Your Skills

Good to know

Know what's good

, what to watch for

, and possible dealbreakers

Explores code obfuscation techniques, which are everywhere in malware analysis

Taught by Josh Stroschein, who are recognized for their expertise in Malware Analysis

Focuses on code obfuscation techniques that malware authors routinely utilize

Suitable for beginners as it first provides a solid foundation of obfuscation techniques

Activities

Be better prepared before your course. Deepen your understanding during and after it. Supplement your coursework and achieve mastery of the topics covered in Malware Analysis: Identifying and Defeating Code Obfuscation with these activities:

Review Programming Concepts

Show steps

Strengthen your programming foundation by reviewing key concepts and techniques prior to taking this course.

Browse courses on Programming Fundamentals

Show steps

Go through your notes or textbooks on programming fundamentals
Practice solving coding problems on platforms like LeetCode or HackerRank
Review basic data structures and algorithms

Review disassembly (1)

Show steps

Review disassembly techniques to prepare for advanced topics in the course.

Browse courses on Disassembly

Show steps

Revisit basics of disassembly
Practice disassembly with disassembler tool

Malware Analysis Techniques Tutorial

Show steps

Supplement your understanding of malware analysis techniques and code obfuscation methods through additional guided tutorials.

Browse courses on Malware Analysis

Show steps

Identify reputable sources for malware analysis tutorials
Follow a structured tutorial on malware analysis principles
Practice malware analysis using the techniques learned in the tutorial
Explore advanced malware analysis techniques to enhance your skills

14 other activities

Expand to see all activities and additional details

Show all 17 activities

Obfuscated Malware Analysis Study Group

Show steps

Engage with peers to discuss and analyze obfuscated malware samples, expanding your knowledge and exchanging insights.

Browse courses on Malware Analysis

Show steps

Organize a study group with classmates.
Select real-world malware samples for analysis.
Use tools like IDA Pro and WinDbg to collaborate on identifying and defeating obfuscation techniques.

Malware Analysis Blog or Article

Show steps

Solidify your understanding by creating an educational piece that explains malware analysis concepts and code obfuscation techniques.

Browse courses on Malware Analysis

Show steps

Choose a specific aspect of malware analysis or code obfuscation to focus on
Research and gather information from credible sources
Organize your content into a logical structure
Write a clear and informative blog post or article

Malware Obfuscation Technique Drills

Show steps

Enhance your understanding of various malware obfuscation techniques and reinforce your ability to identify and defeat them.

Show steps

Identify and analyze different malware samples with various obfuscation techniques.
Use IDA Pro and WinDbg to uncover hidden code and analyze obfuscated malware.

Pattern matching practice

Show steps

Practice pattern matching skills to identify obfuscated code.

Browse courses on Pattern Matching

Show steps

Analyze code samples with obfuscation patterns
Develop strategies for detecting and matching patterns

Follow a Tutorial on String Obfuscation Techniques

Show steps

By following a guided tutorial, you can gain practical knowledge of string obfuscation techniques, enhancing your understanding of how malware authors conceal their code.

Browse courses on Reverse Engineering

Show steps

Find a tutorial on string obfuscation techniques.
Follow the tutorial step-by-step.
Apply the techniques to a real-world malware sample.

Malware Analysis Workshop

Show steps

Enhance your practical skills by attending a workshop dedicated to malware analysis and code obfuscation techniques.

Browse courses on Malware Analysis

Show steps

Identify and register for a relevant malware analysis workshop
Actively participate in the workshop sessions
Engage with experts and peers to exchange knowledge
Apply the techniques learned in the workshop to strengthen your skills

Contribute to Open-Source Security Tools

Show steps

Gain valuable hands-on experience by contributing to open-source security tools that detect and analyze malware.

Browse courses on Malware Analysis

Show steps

Identify a reputable open-source security project
Review the project's codebase and documentation
Identify areas where you can contribute
Submit pull requests with your contributions

Advanced Obfuscation in Native Code

Show steps

Deepen your knowledge of obfuscation in native code, strengthening your ability to detect and defeat techniques used by advanced malware authors.

Browse courses on IDA Pro

Show steps

Study advanced tutorials on function obfuscation in native code.
Practice identifying and analyzing native code obfuscation techniques using IDA Pro.

Analyze Malware Samples Using IDA Pro

Show steps

Gain familiarity with the IDA Pro tool and develop your skills in analyzing malware samples, leading to a deeper understanding of obfuscation techniques.

Browse courses on IDA Pro

Show steps

Download and install IDA Pro.
Load a malware sample into IDA Pro.
Analyze the sample's code and identify any obfuscation techniques.

Write a Summary of Code Obfuscation Techniques

Show steps

Create a summary of different code obfuscation techniques to reinforce your knowledge and improve your ability to recognize and understand them.

Browse courses on Malware Analysis

Show steps

Research various code obfuscation techniques.
Write a summary of each technique, describing how it works.
Provide examples of how each technique can be used in real-world malware.

Malware Obfuscation Knowledge Base

Show steps

Solidify your understanding by documenting your knowledge of malware obfuscation techniques in a comprehensive knowledge base.

Show steps

Organize and structure your knowledge on code obfuscation techniques.
Write detailed descriptions of various obfuscation methods, including real-world examples.
Create visual aids to illustrate complex obfuscation techniques.

Contribute to an Open-Source Malware Analysis Project

Show steps

Contribute to an open-source malware analysis project to gain hands-on experience and deepen your understanding of real-world malware analysis.

Browse courses on Malware Analysis

Show steps

Find an open-source malware analysis project that interests you.
Join the project and read the documentation.
Start contributing to the project.

Develop a Malware Analysis Script

Show steps

Develop a malware analysis script to automate the process of identifying and analyzing obfuscated code, enhancing your efficiency and accuracy.

Browse courses on Reverse Engineering

Show steps

Design the script's functionality.
Write the code for the script.
Test the script on different malware samples.

Contribute to Open-Source Anti-Obfuscation Tools

Show steps

Gain practical experience by contributing to the development of open-source tools that detect and mitigate malware obfuscation.

Browse courses on Malware Analysis

Show steps

Identify open-source anti-obfuscation projects that align with your interests.
Study the codebase and understand its functionality.
Contribute bug fixes, feature improvements, or new functionality to the project.
Collaborate with other developers to enhance the tool's capabilities.

Career center

Learners who complete Malware Analysis: Identifying and Defeating Code Obfuscation will develop knowledge and skills that may be useful to these careers:

Malware Analyst

Malware Analysts are tasked with analyzing viruses and finding vulnerabilities to help stop the spread and damage they may cause. As a Malware Analyst, you would benefit greatly from this course, as it teaches you how to easily identify and defeat code obfuscation, which can help you analyze malware more quickly and efficiently. This course can help you get into or advance your career in this field, as it is a valuable skill that will set you apart from other candidates.

See salaries and explore the career path for Malware Analyst

Cybersecurity Analyst

Cybersecurity Analysts play a key role in protecting computer systems and networks from malicious attacks. They work to identify, prevent and respond to threats, including malware. Taking this course could help you identify and defeat code obfuscation techniques used by malware authors, making you a more effective Cybersecurity Analyst.

See salaries and explore the career path for Cybersecurity Analyst

Software Engineer

Software Engineers work to design, develop, and maintain software applications. They may specialize in different areas of software development, such as cybersecurity or malware protection. By taking this course, you will learn how to identify and defeat common obfuscation techniques used by malware authors, which could help you create more secure and robust software applications.

See salaries and explore the career path for Software Engineer

Security Researcher

Security Researchers work to identify and exploit vulnerabilities in computer systems and networks to help improve security. They may also develop new methods for detecting and preventing malware threats. Taking this course may be helpful for a career in this field, as it provides valuable skills for identifying and defeating code obfuscation techniques used by malware authors.

See salaries and explore the career path for Security Researcher

Computer Forensic Analyst

Computer Forensic Analysts investigate digital evidence to find and analyze data that can be used in legal proceedings. Taking this course can help build a foundation for understanding malware analysis, providing valuable insights into how malware authors use code obfuscation and how to detect and defeat these techniques as part of an investigation.

See salaries and explore the career path for Computer Forensic Analyst

IT Auditor

IT Auditors assess and evaluate the security of computer systems and networks. They provide recommendations to improve security and help organizations meet regulatory compliance requirements. Taking this course can provide valuable knowledge about how malware authors use code obfuscation to evade detection and compromise systems, which auditors need to be aware of in order to assess risks and make informed recommendations.

See salaries and explore the career path for IT Auditor

Network Security Engineer

Network Security Engineers design, implement, and maintain network security infrastructure to protect organizations from cyber threats. They work to identify, prevent, and respond to security incidents, including malware attacks. Taking this course could help build a strong understanding of how malware authors use code obfuscation to evade network security measures, helping you to develop more effective security strategies.

See salaries and explore the career path for Network Security Engineer

Security Consultant

Security Consultants provide advice and guidance to organizations on how to improve their security posture. They work with organizations to identify risks, develop security policies, and implement security measures. Taking this course may be useful for this role, as it provides valuable knowledge about how malware authors use code obfuscation to compromise systems, which can help you to better advise clients on how to protect their systems.

See salaries and explore the career path for Security Consultant

Penetration Tester

Penetration Testers are ethical hackers who are employed to identify vulnerabilities in computer systems and networks. They use various techniques to exploit vulnerabilities and assess the security of systems, including malware. Taking this course can help you understand how malware authors use code obfuscation to hide malicious code and evade detection, making you a more effective Penetration Tester.

See salaries and explore the career path for Penetration Tester

IT Security Specialist

IT Security Specialists plan, implement, and manage security measures to protect computer systems and networks from threats. They work to prevent, detect, and respond to security incidents, including malware attacks. Taking this course may be useful for those looking to enter or advance in this role, as it covers techniques for identifying and defeating code obfuscation used by malware authors.

See salaries and explore the career path for IT Security Specialist

Information Security Manager

Information Security Managers are responsible for developing and implementing security policies and procedures to protect an organization's information assets. They work to ensure that the organization's information is protected from unauthorized access, use, disclosure, disruption, modification, or destruction. Taking this course may be useful for this role, as it provides valuable knowledge about how malware authors use code obfuscation to compromise systems, which can help you to better protect your organization's information assets.

See salaries and explore the career path for Information Security Manager

Incident Responder

Incident Responders are responsible for responding to and managing security incidents. They work to contain and mitigate the impact of security incidents, including malware attacks. Taking this course may be useful for this role, as it provides valuable knowledge about how malware authors use code obfuscation to evade detection, which can help you to better respond to and manage security incidents.

See salaries and explore the career path for Incident Responder

Data Scientist

Data Scientists use data to build models and make predictions. They work in a variety of industries, including finance, healthcare, and retail. Taking this course may be useful for this role, as it provides valuable knowledge about how malware authors use code obfuscation to evade detection, which can help you to better analyze and interpret data.

See salaries and explore the career path for Data Scientist

Software Developer

Software Developers design, develop, and maintain software applications. They may work in a variety of industries, including finance, healthcare, and retail. Taking this course may be useful for this role, as it provides valuable knowledge about how malware authors use code obfuscation to evade detection.

See salaries and explore the career path for Software Developer

Systems Administrator

Systems Administrators manage and maintain computer systems and networks. They work in a variety of industries, including finance, healthcare, and retail. Taking this course may be useful for this role, as it provides valuable knowledge about how malware authors use code obfuscation to evade detection, which can help you to better manage and protect your systems.

See salaries and explore the career path for Systems Administrator