Name & Direct Link: Malware Analysis – Intermediate Level

Platform: Malware Analysis for Hedgehogs

Cost: $489

Course Instructor: Karsten Hahn

Community: There is a Discord server

Proof of Completion: Certificate

Topics Include:

• Calling conventions for x86/x64
• C++ string deobfuscation and Ghidra scripting
• Compression, encoding and cryptographic algorithms
• Theoretical foundations of signatures and patterns
• Writing signatures with YARA
• Code based signatures for x86
• Unpacking
• Hooks, syscalls and x64dbg scripting
• Shellcode analysis, PEB walking, import hashing
• Writing and automatic hash resolver

Name & Direct Link: Malops – Advanced Malware Analysis Training Platform

Cost: Free

Community: They have a Discord server

Description: Explore real-world malware scenarios, learn new techniques, and build confidence through practical experience.

Name & Affiliate Link*: Malware Analyst Professional – Level 2

Platform: TrainSec

Course Instructor: Uriel Kosayev

Cost: $350

Proof of Completion: Certification of Completion

Community/Forum: There is a Discord community

Topics Include:

• Intro to Reverse Engineering
• Bitwise Operations
• Understanding Windows API Functions
• Introduction to Code Injections
• Process Injection Classifications
• Process Hollowing
• Introduction to Anti-Analysis
• Anti-Debugging
• Anti-VM
• Anti-AV
• Introduction to Packers and the Unpacking Process
• Manual Unpacking
• Introduction to Shellcode Analysis
• Shellcode Reverse Engineering
• Ransomware Reverse Engineering
• Reverse Engineering .NET Malware

*DFIR Diva is an affiliate of TrainSec and receives a small percentage of sales made through affiliate links that go toward keeping the site running.

Name & Affiliate Link*: MAoS – Malware Analysis on Steroids Bundle

Platform: TrainSec

Course Instructor: Uriel Kosayev

Cost: $700

Proof of Completion: Certification of Completion

Community/Forum: There is a Discord community

Topics Include:

• Malware Analyst Professional – Level 1
  • Lab Setup
  • Deploying Flare-VM
  • Connecting to INetSim
  • Introduction to Code Reverse Engineering
  • Installing Visual Studio
  • Basic C Code
  • Basic Reverse Engineering
  • The PE Structure
  • Static Malware Analysis
  • Identifying File Types
  • Strings Extraction
  • Identifying Malicious Functionality
  • Packing Analysis
  • Dynamic Malware Analysis
  • Working with Process Explorer
  • Extracting IoC’s using Process Hacker
  • Working with Procmon
  • Monitoring WinAPI Functions using API Logger
  • Inspecting Process Command Line Line Parameters using CMD Watcher
  • Debugging DLL Files with IDA Disassembler
  • Malicious Documents Analysis
  • Analyzing Malicious PDF Files
  • Analyzing VBA Macros
  • YARA Rule Examples
• Malware Analyst Professional – Level 2
  • Intro to Reverse Engineering
  • Bitwise Operations
  • Understanding Windows API Functions
  • Introduction to Code Injections
  • Process Injection Classifications
  • Process Hollowing
  • Introduction to Anti-Analysis
  • Anti-Debugging
  • Anti-VM
  • Anti-AV
  • Introduction to Packers and the Unpacking Process
  • Manual Unpacking
  • Introduction to Shellcode Analysis
  • Shellcode Reverse Engineering
  • Ransomware Reverse Engineering
  • Reverse Engineering .NET Malware

*DFIR Diva is an affiliate of TrainSec and receives a small percentage of sales made through affiliate links that go toward keeping the site running.

Name & Direct Link: Malware Reverse Engineering (On-Demand): Basic to Advanced with Detection Engineering

Platform: Intelliroot Academy

Cost: $375

Topics:

• PE File Format
• Windows Internals
• Basic Malware Analysis
• Tools (Ghidra, IDA, Ollydbg, x64dbg and more…)
• Assembly Language
• Reverse Engineering
• Cryptography in Malware
• Compilers used by Malware
• Networking in Malware
• Packers and Unpacking
• Code Injection
• API Hooking
• Rootkits
• .NET Reverse Engineering
• VB Malware
• Golang Malware
• Anti-Analysis/Evasion Techniques
• Detection Engineering

Name & Direct Link: Jai Minton’s YouTube Channel & Website

Topics:

YouTube Topics Include:

• AES Decryption with CyberChef and ISO File Forensics
• LNK File Malware Analysis and HTA Deobfuscation
• Reverse Engineering via Debugging, FLOSS, and API Monitoring
• Static and Dynamic Malware Analysis
• PowerShell Malware
• Create YARA Rules with Ghidra

Website Topics Include:

• Reverse Engineering Analysis Lab
• Malware Analysis Tutorial

Name & Direct Link: Malware Analysis Skill Path

Platform: LetsDefend

Cost: VIP Plan – $24.99/month – $199/year

Proof of Completion: Certificate of Completion

Community: There is a LetsDefend Discord server

Student Discount: They have Special Pricing for Students (50% off)

Topics:

• Malware Analysis Fundamentals
• Dynamic Malware Analysis
• Building a Malware Analysis Lab
• Malware Traffic Analysis with Wireshark
• Static Malware Analysis
• Malicious Document Analysis
• Reverse Engineering
• VirusTotal for SOC Analysts

Name & Direct Link: Introduction to Malware Binary Triage

Platform: Invoke Reversing

Cost:

Regular: Individual – $299, Premium – $499

Student: Student – $199, Premium – $332

They also offer a free trial that includes some modules, lectures, videos, and a lab.

Community/Forum: There is a Discord channel

Proof of Completion: Certificate of Completion

Topics:

• Introduction to Malware Triage
• Virtual Machine Setup
• PE File Format
• x86 Assembly
• Static Analysis
• Dynamic Analysis
• Network Monitoring
• Obfuscation
• Unpacking and Process Injection
• Comparative Analysis
• Writing Effective Yara Rules
• Automating Malware Triage

Name & Direct Link: Anuj Soni’s YouTube Channel

Cost: Free

Hands-On: Samples are provided so you can follow along

Topics Include:

• Malware Analysis with Binary Ninja
• Decode Malware Strings with Conditional Breakpoints
• Ghidra’s BSim Feature
• Malware Evasion Techniques: API Unhooking
• Identifying Code Reuse in Ransomware with Ghidra and BinDiff
• Code Analysis with Ghidra
• Finding Encryption in Malware

Name & Direct Link: C5W Certified Malware Analyst (CCMA) – On Demand

Platform: Cyber 5W

Cost: $650

Topics:

• Introduction to Malware Analysis
• Static Malware Analysis 101
• Dynamic Malware Analysis 101
• Static Malware Analysis 102 – IDA Pro
• Static Malware Analysis 102 – Ghidra
• Dynamic Malware Analysis 102
• Analyzing Managed Code (readable/uncompiled)
• Extracting IOCs and Writing YARA Rules
• Hands-On Labs