Study documents for the SANS 610
Day 1 - Malware Analysis Fundamentals
PE Studio
Strings/pestr
Process Hacker
Process Monitor
Process Hacker
Regshot
Wireshark
IDA
x64 debug
fakedns
inetsim
Day 2 - Reversing Malicious Code
Intel Processor
Registers
Pointers
Memory Addressing
Branching
Calling Conventions
How functions work
The Stack
Control Flow
Day 3 - Malicious Web and Document Files
js (SpiderMonkey)
pdf-parser
base64dump
oledump
olevba
xor-kpa
rtfdump
Day 4 - In-Depth Malware Analysis
upx
scdbg
volatility
Day 5 - Examining Self-Defending Malware
brxor
bbcrack
floss
scylla
Day 6 - CTF