Module 1

Before the course

1. 1.(W00) Course Instructions
2. 2.(W32M00) Course Introduction

Module 2

Module 1

1. 1.(W32M01) Introduction to malware
2. 2.(W32M02) Spreading Techniques
3. 3.(W32M03) Attack scenarios
4. 4.(W32M04) IoC and YARA
5. 5.(W32M05) Lab Setup
6. 6.(W32M06) exiftool
7. 7.(W32M07) oleid
8. 8.(W32M08) Module 1 - Lab 1
9. 9.(W32M09) Module 1 - Lab 2
10. 10.(W32M10) MS Office document structure
11. 11.(W32M11) MS Office document static analysis
12. 12.(W32M12) YARA
13. 13.(W32M13) Malscanner
14. 14.(W32M14) Tools - continued
15. 15.(W32M15) Offevis
16. 16.(W32M16) XOR
17. 17.(W32M17) Olevba
18. 18.(W32M18) MS Office document dynamic analysis
19. 19.(W32M19) MS Office document dynamic analysis - Fakenet lab 1
20. 20.(W32M20) MS Office document dynamic analysis - Fakenet lab 2
21. 21.(W32M21) ViperMonkey
22. 22.(W32M22) MS Excel - Lab
23. 23.(W32M23) MS PowerPoint - Lab

Module 3

Module 2

1. 1.(W32M25) PDF Architecture
2. 2.(W32M26) PDF Analysis - Tools Part 1
3. 3.(W32M27) PDF Tools - Part 2 - Malzilla
4. 4.(W32M28) PDFid
5. 5.(W32M29) PDFinfo
6. 6.(W32M30) PDF-parser
7. 7.(W32M31) AnalyzePDF
8. 8.(W32M32) PDFextract
9. 9.(W32M33) PeePDF
10. 10.(W32M34) Origami
11. 11.(W32M35) PDFStreamDumper
12. 12.(W32M36) Pyew
13. 13.(W32M37) Malzilla
14. 14.(W32M38) Online Resources - Lab
15. 15.(W32M39) Module 2 Lab
16. 16.(W32M40) Obfuscation

Module 4

Module 3

1. 1.(W32M42) Packer & Anti-VM
2. 2.(W32M43) Anti-sandbox
3. 3.(W32M44) Crypter
4. 4.(W32M45) Debuggers
5. 5.(W32M46) Lazy Office
6. 6.(W32M47) Debugging (LazyOffice analyzer)

Module 5

Final exam