Malware Analysis & Reverse Engineering — Study Course

The official preparation course for the Malware Analysis & Reverse Engineering certification: structured modules, worked examples and exam-focused practice.

Key facts

• Course price: $286 (one-time payment)
• Field: Cybersecurity & Information Security
• Prepares for: Malware Analysis & Reverse Engineering
• 7 modules · 23 lessons · about 7 hours of lessons
• Self-paced, online, illustrated lessons

Course outline

1. Malware Analysis Foundations — Establishes the discipline, lab environment, toolchain, and safety practices every malware analyst needs before touching a live sample.
   • The Malware Analysis Discipline
   • Building a Safe Analysis Lab
   • Core Toolchain Overview
2. Static Analysis — Covers hands-on static analysis techniques: file identification, PE structure, string extraction, import analysis, and entropy-based packer detection.
   • File Identification and Triage
   • PE Format Deep Dive
   • String Extraction and Import Analysis
   • Packer Detection and Unpacking
3. x86/x64 Assembly for Reverse Engineering — Teaches enough assembly language to read disassembler output fluently, understand calling conventions, and recognize common code patterns in malware.
   • Registers, Memory, and Instructions
   • Calling Conventions and Function Anatomy
   • Recognizing Malicious Code Patterns in Assembly
4. Dynamic Analysis and Behavioral Observation — Teaches hands-on dynamic analysis: running malware under controlled conditions and systematically capturing file, registry, process, network, and memory artifacts.
   • Process and File System Monitoring
   • Network Traffic Analysis
   • Sandbox Analysis and Automated Reporting
   • Memory Forensics for Malware Analysis
5. Advanced Techniques — Evasion, Injection, and Persistence — Covers the anti-analysis, injection, and persistence mechanisms used by sophisticated malware, equipping analysts to recognize and defeat them.
   • Anti-Analysis Techniques and Countermeasures
   • Code Injection Techniques
   • Persistence Mechanisms
6. Disassembly, Decompilation, and Config Extraction — Teaches use of IDA Pro and Ghidra for deep-dive reverse engineering, decompiler-aided analysis, and practical malware configuration extraction.
   • IDA Pro and Ghidra Fundamentals
   • Analyzing Real Malware Families — Case Studies
   • Writing YARA Rules for Detection
7. Exam Readiness — Concepts, Structure, and Practice Strategy — Consolidates all key concepts, maps them to exam domains, explains how the Malware Analysis and Reverse Engineering expert-level exam is structured, and provides a practice and revision strategy.
   • Key Concepts Rapid Review
   • Exam Structure and Domain Weighting
   • Practice Strategy and Final Preparation