Unit 1 Introduction to Malware

7 lecture hours

• Introduction to malware
• OS security concepts
• malware threats
• evolution of malware
• malware types-viruses
• logic Bombs
• malware analysis
• Malware analysis and its significance in digital forensics

Unit 2 Static Analysis and Dynamic Analysis

8 lecture hours

• Static Analysis-Determining the File Type
• Fingerprinting the Malware
• Extracting Strings
• Determining File Obfuscation
• Inspecting PE Header Information
• Dynamic Analysis- System and Network Monitoring
• Dynamic Analysis (Monitoring) Tools
• Dynamic Analysis Steps
• Dynamic- Link Library (DLL) Analysis

Unit 3 Malware Obfuscation Techniques

• Simple Encoding
• Malware Encryption
• Custom Encoding/Encryption
• Malware Unpacking
• Code Analysis Tools
• Static Code Analysis (Disassembly) Using IDA, Disassembling Windows API, Patching Binary Using IDA, IDA Scripting and Plugins. 7 15 2021 - 22 GUJARAT TECHNOLOGICAL UNIVERSITY Bachelor of Engineering Syllabus Subject Code : 3174506 Subject Name : Malware Analysis https://syllabus.gtu.ac.in/ Page 2

Unit 4 Hunting Malware Using Memory Forensics

7 lecture hours

• Memory Forensics Steps
• Memory Acquisition
• Volatility Overview
• Enumerating Processes
• Listing Process Handles
• Listing DLLs
• Dumping an Executable and DLL, Listing Network Connections and Sockets
• Inspecting Registry
• Investigating Service
• Extracting Command History

Unit 5 Malware Detection Techniques

7 lecture hours

• Signature-based techniques: malware signatures
• packed malware signature
• metamorphic and polymorphic malware signature
• non- signature-based techniques: similarity-based techniques
• machine- learning methods
• invariant inferences

Unit 6 Android Malware

3 lecture hours

• Malware Characterization
• Case Studies – Plankton
• Smartphone (Apps) Security

Unit 7 Latest trends in Malware Analysis

3 lecture hours

• MITRE ATT&CK framework
• Case study of ransomware attacks
• use of Artificial Intelligence for malware attacks