AI, Data Science & Cloud Certificates from Google, IBM & Meta — 40% Off
One plan covers every Professional Certificate on Coursera. 40% off Coursera Plus Annual.
Unlock All Certificates
Explore the intricacies of malware analysis in this 16-minute video tutorial focusing on Lockbit and similar malware families. Dive deep into the process of locating and utilizing the Process Environment Block (PEB) to identify in-memory DLLs, enabling malware to find necessary libraries and functions during runtime while avoiding the pre-declared import table. Learn how this technique complicates basic analysis and reverse engineering by obscuring function resolution. Discover Lockbit's unique approach of using seeds to add complexity to the process. Follow along as the tutorial guides you through finding PEB references, accessing PEB structure members, viewing relevant structures in WinDbg, and adding structures in IDA. Gain valuable insights into advanced malware analysis techniques and enhance your cybersecurity skills.
