Learn navigation inside the assembly code, the difference between values and pointers, concepts of stack and heap, custom data types and shifted pointers! Get introduced to Golang and Rust reverse engineering – and finally, reverse ‘real’ malware to solidify your knowledge and skills!
Contact us
Ask a question?
If you want to know anything about the course, we’re here to help.
Reverse Engineering 101
Course Overview
For computer science specialists, it is not always obvious where to apply their skills when building a stunning future career. Cybersecurity is one of the most in-demand types of expertise on the market. Businesses need it to protect themselves from malware attacks - according to a Kaspersky report, about one-in-three ransomware Trojan victims are corporate users.
‘Reverse Engineering 101’ by Kaspersky opens the door on the field for reverse engineering , a core skill for those wanting to build a career as a malware analyst or threat hunter. The on-demand online format allows companies to upgrade staff without interrupting their work. Starting from the basic concepts, learners gradually move through Intel assembly instructions, distinctive calling conventions and memory types, executable analysis and more to finally reverse ‘real’ malware and solidify their knowledge and skills.
This course is a prequel to the next-level ‘Targeted Malware Reverse Engineering’ training also available on-demand.
Start your malware reverse engineering journey with Kaspersky!
Reverse-engineer ‘real’ malware
Learn from the best
Get introduced to reverse engineering by Kaspersky’s top experts from the Global Research & Analysis Team (GReAT), a group of the chosen few providing company leadership in anti-malware research.
Fit out for level up
Upgrade your reverse engineering skills to progress to our next-level ‘Targeted Malware Reverse Engineering’ course.
All Levels
$890 inc. tax per learner
Training objectives
By the end of this course you will:
- Gain the initial knowledge needed for malware analysis
- Understand the main Intel assembly instructions
- Understand different calling conventions (stdcall, fastcall) and memory types (automatic, dynamic, static)
- Analyze executables generated by different compilers to become unafraid of more “esoteric” ones
- Prepare yourself for the next level RE course
Prerequisites
- Knowledge of programming concepts
- Familiarity with C and C++
- Familiarity with Rust and Go (optional)
- Performing basic operations with the Visual Studio IDE
Your course leaders
Denis Legezo
Lead Security Researcher
Denis Legezo is a GCFA certified cybersecurity professional who specializes in targeted attacks research, static reverse engineering.
Denis regularly provides training on these subjects and has presented his targeted malware research at SAS, RSA Conference, VirusBulletin, HITB.
Ivan Kwiatkowski
Senior Security Researcher, GReAT
Ivan Kwiatkowski is an OSCP and OSCE-certified penetration tester and malware analyst who has been working as a Senior Security Researcher in the Global Research & Analysis Team at Kaspersky since 2018.
He maintains an open-source dissection tool for Windows executables and his research has been presented during a number of global cybersecurity conferences. He operates an exit node of the Tor network and also delivers Kaspersky’s reverse-engineering training in Europe.
Who it's for
Enterprises
If you are looking to beef up your SOC or cybersecurity team with a reverse engineer or malware analyst, this course will allow your IT staff to make a first step into reverse engineering malware.
Cybersecurity consultancies
The course benefits specialist consultancies who need to train their team in relevant practical skills to be able to offer malware analysis services to their clients.
Would-be InfoSec professionals
The course is designed to upskill individual learners looking to embark on a career in cybersec. While learning, you will develop reverse engineering potential and prepare yourself for more advanced steps.
How you'll learn
Guided video lectures
Learn from 50-videos with top-notch Kaspersky GReAT experts, sharing their practical experience and hacks.
Code snippets on GitHub
Practice in our dedicated GitHub repository, designed specially for the course.
Iterative learning
The course is structured around progressive learning with a consistent module framework based on specialist overviews of each task, practical work in GitHub and detailed solutions.
Syllabus
Theory
- Introduction to ASM
- The Most Common ASM Instructions
- Correspondence Between C Code And ASM
- Solution: Reading ASM Code. Function calls
- Calling Conventions
- Solution: Understanding a full function. Wrap-up
C-Language 'Hello World'
- Introduction
- The Simplest C Program
- First Steps With IDA
- Working Without Debugging Symbols
- Solution: First Steps With IDA. Windows API
- Solution: Arguments And Constants. Wrap-up
Simple Lambdas
- Starting With Value Fields
- Solution: Value Fields. Adding Pointers
- Solution: Adding Pointer. Shallow And Deep Copying
- Solution: Shallow And Deep Copying. Wrap-up
Stuck In The Heap
- Counting Hash Value
- Solution: Counting Hash Value. Meet The Heap
- Solution: Meet The Heap. Memory Management
- Solution: Memory Management. Wrap-up
Lists And Tricky Pointers
- Servers Chain
- Solution: Servers Chain. List It Till The End
- Solution: List It Till The End. Pointer To The Insides
- Solution: Pointers To The Insides. Wrap-up
C++ And OOP
- Introduction
- Solution: A Simple Class
- Virtual Function Table
- Solution: C++ Inheritance
- The Decompiler
- STL Library: The String Class
- STL Library: The Vector Class. Wrap-up
Pain In The Containers
- Commands As Dictionary
- Solution: Commands As Dictionaries. Real Handlers
- Solution: Real Handlers. Make It Set
- Solution: Make It Set. Wrap-up
Introduction To Golang Reverse-engineering
- Introduction
- Solution: Golang Basics. Debuggers
- Working With x64dbg
- Reconstructing Go Code From The Assembly
- Controlling Execution With Debugger
- Solution: The Decryptor. Go Reverse-engineering methodology
‘Rusty' Code
- Simplest Esoteric Decryptor
- Solution: Simplest Esoteric Decryptor. Vector by reference
- Solution: Vector By Reference. Let's Be More Rusty
- Solution: Let's Be More Rusty. Wrap-up
A 'Real' Malware
- Introduction
- Stage 1
- Stage 2
- Stage 3
- Outro. Course summary
Benefits for you
 |
Six months to complete your course from activation of your access code |  |
 |
Courses delivered in English with subtitles | |
 |
Self-guided learning that fits around your life | |
 |
It will take you approximately 18 hours to watch the videos | |
 |
PDF downloads of training materials and tips | |
 |
Browser-based via desktop, mobile & tablet (excludes virtual lab which requires an RDP client) | |
 |
Members of Kaspersky Global Research and Analysis Team (GReAT) | |
 |
50+ videos to guide you through the course | |
 |
Dedicated GitHub repository for hands-on learning | |
 |
Platform support and help from our subject matter experts is available by email 0900 - 1730 UK time on standard business days via help.kasperskyxtraining.com. | |
 |
PDF document on a Kaspersky letterhead certifying the completion of the course, signed by the course leader(s) | |
$890 inc. tax per learner