Reverse Engineering & Malware Analysis - Intermediate Level: Advance from malware fundamentals to unpacking, memory tracing, and API-driven analysis

Paul Chin

$79.99

Video Jul 2026 5hrs 40mins 1st Edition

Paul Chin

$79.99

Video Jul 2026 5hrs 40mins 1st Edition

What do you get with a video?

Download this video in MP4 format

Access this title in our online reader with advanced features

DRM FREE - Read whenever, wherever and however you want

Download Code

Key benefits

Intermediate focus on malware unpacking, process behavior, malicious APIs, and memory tracing
Case-driven coverage of packed trojans, custom protectors, injection, and executable repair
Specialist tools for hooks, breakpoints, payload dumps, import fixes, and PE reconstruction

Description

Packed malware is designed to conceal code and frustrate analysis, making unpacking a critical capability for reverse engineers. Intermediate investigations require a firm grasp of malware terminology, assembly language, malicious APIs, process behavior, and the relationship between executable files and memory. Learning moves from static and dynamic review into API hooking, breakpoint enumeration, process hijacking, injection techniques, memory tracing, and payload dumping. Detailed demonstrations use x64dbg, Scylla, Process Hacker, PE Studio, PE Bear, dnSpy, and related tools to identify when code has unpacked and recover it. Multiple trojan cases provide practice fixing import tables, section alignment, mappings, and image bases after a dump. Learners develop a repeatable method for examining protected samples, distinguishing packers, and rebuilding usable executables for further analysis. By the end of this course, you will be able to unpack malware, trace execution in memory, and repair dumped PE files.

Who is this book for?

Best suited to learners who already understand basic malware analysis or software reverse engineering, including security students, hackers seeking additional analysis techniques, and reverse engineers moving into malware investigation. A Windows PC with a virtual machine and Flare VM installed is expected.