PaulDotCom mailing list archives

Re: Malware reverse engineering


From: Bugbear <gbugbear () gmail com>
Date: Mon, 31 Jan 2011 09:41:38 -0500

Agree with Ben on the book thus far. I cracked it open for the first
time on the train ride from shmoocon yesterday. Within first few pages
of dynamic analysis chapter, I had already learned something. Cant
wait to finish the chapter tonight.

Tim

On Mon, Jan 31, 2011 at 7:30 AM, Kevin Shaw <kevin.lee.shaw () gmail com> wrote:
I just met the writer of the Contagio blog at Shmoocon and her blog looks
like it is another good resource; and she references others as well.

If anyone has taken SANS' course on fighting malware (I'm pretty certain
there's one or two! ) I'm sure the list would like to hear about those as
well..

On Jan 30, 2011 7:52 AM, "Ken Pryor" <kdpryor () gmail com> wrote:
I would strongly recommend two books for you:

The Malware Analysts Cookbook *http://tinyurl.com/4ufb8tf*
and
Malware Forensics *http://tinyurl.com/4ksbth3*

On Fri, Jan 28, 2011 at 2:34 PM, Mosh <moshhax0r () gmail com> wrote:

Hi There

I really want to learn to do a reverse engineering for malware, but i
don't have money to do a course :-(, so maybe you can help me with this,
i
appreciate all your comments:

i Have two questions:

What should be the process for a detail analysis of malware function ?
Do you know about some tools ?


Thank you so much and sorry for the bad english


Mosh

_______________________________________________
Pauldotcom mailing list
Pauldotcom () mail pauldotcom com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com


_______________________________________________
Pauldotcom mailing list
Pauldotcom () mail pauldotcom com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com

_______________________________________________
Pauldotcom mailing list
Pauldotcom () mail pauldotcom com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com


Current thread: