Course outline(W32M10) MS Office document structure

Your course

Analyzing malicious documents (W32)

Module 1

Before the course

  1. 1.(W00) Course Instructions
  2. 2.(W32M00) Course Introduction

Module 2

Module 1

  1. 1.(W32M01) Introduction to malware
  2. 2.(W32M02) Spreading Techniques
  3. 3.(W32M03) Attack scenarios
  4. 4.(W32M04) IoC and YARA
  5. 5.(W32M05) Lab Setup
  6. 6.(W32M06) exiftool
  7. 7.(W32M07) oleid
  8. 8.(W32M08) Module 1 - Lab 1
  9. 9.(W32M09) Module 1 - Lab 2
  10. 10.(W32M10) MS Office document structure
  11. 11.(W32M11) MS Office document static analysis
  12. 12.(W32M12) YARA
  13. 13.(W32M13) Malscanner
  14. 14.(W32M14) Tools - continued
  15. 15.(W32M15) Offevis
  16. 16.(W32M16) XOR
  17. 17.(W32M17) Olevba
  18. 18.(W32M18) MS Office document dynamic analysis
  19. 19.(W32M19) MS Office document dynamic analysis - Fakenet lab 1
  20. 20.(W32M20) MS Office document dynamic analysis - Fakenet lab 2
  21. 21.(W32M21) ViperMonkey
  22. 22.(W32M22) MS Excel - Lab
  23. 23.(W32M23) MS PowerPoint - Lab

Module 3

Module 2

  1. 1.(W32M25) PDF Architecture
  2. 2.(W32M26) PDF Analysis - Tools Part 1
  3. 3.(W32M27) PDF Tools - Part 2 - Malzilla
  4. 4.(W32M28) PDFid
  5. 5.(W32M29) PDFinfo
  6. 6.(W32M30) PDF-parser
  7. 7.(W32M31) AnalyzePDF
  8. 8.(W32M32) PDFextract
  9. 9.(W32M33) PeePDF
  10. 10.(W32M34) Origami
  11. 11.(W32M35) PDFStreamDumper
  12. 12.(W32M36) Pyew
  13. 13.(W32M37) Malzilla
  14. 14.(W32M38) Online Resources - Lab
  15. 15.(W32M39) Module 2 Lab
  16. 16.(W32M40) Obfuscation

Module 4

Module 3

  1. 1.(W32M42) Packer & Anti-VM
  2. 2.(W32M43) Anti-sandbox
  3. 3.(W32M44) Crypter
  4. 4.(W32M45) Debuggers
  5. 5.(W32M46) Lazy Office
  6. 6.(W32M47) Debugging (LazyOffice analyzer)

Module 5

Final exam

Course overview
Module 2Lesson 10

(W32M10) MS Office document structure

Lesson videoLocked

Member lesson

Unlock the full lesson

Sign in to watch and unlock the course materials.