🇺🇸USA HQ · Serving 40+ Countries All Systems Operational
security@shieldcoresec.com ·24/7 SOC Operations
Services Academy Contact
Get Free Consultation
Malware Analysis & Reverse Engineering
Academy›Malware Analysis & Reverse Engineering
SELF-PACED · 8 WEEKS · GREM ALIGNED

Malware Analysis & Reverse Engineering

Static and dynamic malware analysis, x86/x64 assembly reading, Ghidra and IDA Pro usage, sandbox evasion analysis, unpacking, and writing YARA detection rules. Real malware samples in isolated lab environments.

Assembly LanguageGhidraIDA ProYARA RulesSandbox AnalysisAnti-Analysis Techniques
Enroll Now Get Free Guidance →
8
Weeks
Real
Malware Samples
GREM
Aligned
Lifetime
Access
Curriculum

Full Course Outline

10 modules · Practical labs throughout · Real-world case studies

01
Introduction to Malware Analysis
Types of malware, analysis environments, safe lab setup, legal considerations
3h
02
Static Analysis Fundamentals
File hashing, PE structure analysis, string extraction, import analysis, YARA basics
4h
03
Dynamic Analysis
Cuckoo sandbox, Process Monitor, Process Hacker, Wireshark, FakeNet-NG
4h
04
x86/x64 Assembly Basics
Registers, instructions, calling conventions, stack operations — enough to read disassembly
6h
05
Ghidra for Malware Analysis
Decompiler usage, function analysis, cross-references, scripting, data type creation
5h
06
IDA Pro Essentials
Navigation, graphing, renaming, IDA Python basics, comparison with Ghidra
4h
07
Anti-Analysis Techniques
Packing, obfuscation, anti-debugging, anti-VM, code injection — and how to defeat them
5h
08
Ransomware Analysis
Encryption implementation analysis, key extraction, decryptor development
4h
09
YARA Rule Writing
Creating detection rules from malware analysis, testing, and rule optimisation
3h
10
Capstone — APT Malware
Full analysis of a real APT toolkit from initial triage to detailed technical report
6h
Ryan Park
GREM · OSCP · GCFE

SANS FOR610 instructor. Reverse engineered 200+ malware families including APT toolkits. Expert in EDR bypass and custom C2 framework development.

Enroll in This Course Get Free Career Guidance →
Who This Is For

Is This Right for You?

DFIR analysts who want to go deeper on malware investigation
Threat intelligence analysts building YARA detection rules
Security researchers interested in vulnerability research
Anyone studying for GREM certification
Experienced security professionals wanting reverse engineering skills
Prerequisites

What You Need to Start

Completion of DFIR course recommended (not required)
Basic programming knowledge helpful (Python or C preferred)
Familiarity with command line and Windows internals
Open to Complete Beginners
No degree required. No age limit. If you can use a computer and commit the time, we'll teach you everything else.
Ready to start this course?
Not sure? Get a free 30-minute career guidance call with one of our instructors.
Enroll Now →Free Career Guidance
Keep Learning

You Might Also Like

DFIR Program

Build your forensics foundation before specialising in malware reverse engineering.

View Course →

Bug Bounty & AI Security

Apply your low-level knowledge to bug bounty hunting and AI security research.

View Course →
View All Programs →
JUNE 2026 · 24 SEATS ONLY

Start Your Journey.
Land a $100K+ Role in 6 Months.

No tech background needed. No age limit. Just commitment — and we'll handle everything else, including getting you hired.

Enroll Now — June Cohort Get Free Career Guidance →
No income share · Cancel anytime · Career support until hired