Learn

In this page there are all the topics that I want to detail more but it is better to expand outside a standard report.

This often include reproducible Go code that you can build on a Windows machine and test out to prove how some techniques implemented by malware authors works in details.

Introduction to Windows API

An intro to Windows API, naming/behaviour/calling conventions in C and ASM.

Mutex

Learn how malware uses Mutexes.

Load Resources

Learn how malware loads embedded resources.

Process Enumeration

Section exploring how malware attempts to enumerate running processes on a Windows machine.

Load Library

Load a library indirectly to improve evasion and anti-analysis.