Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

YouTube

TLS Callbacks in PE Files - Detection and Analysis

Dr Josh Stroschein via YouTube

Start learning Write review
Corporate Finance Institute Ad

Build the Finance Skills That Lead to Promotions, Not Just Certificates

Learn More → Boot.dev Ad

The Most Addictive Python and SQL Courses

Learn More →

Overview

Google, IBM & Meta Certificates – 40% Off
One Coursera Plus subscription covers most Professional Certificates on Coursera.
Unlock All Certificates
This course examines TLS callbacks in PE files, including how to identify them in 010 Editor, IDA Pro, and Malcat. It also uses YARA and Yaraify to investigate their prevalence and role in malware execution before a program’s main entry point.

Syllabus

Definition of TLS on MSDN
TLS Structure Definition
Our Sample Program
Identifying TLS Callbacks in 010
Finding the First Callback in 010
TLS Callbacks in IDA Pro
Switching to Malcat
Why Do We Need to Know This?
How Prevalent are TLS Callbacks? Investigating with Yara
Expanding our Search with Yaraify
Investigating Recent Examples

Taught by

Dr Josh Stroschein

Reviews

Start your review of TLS Callbacks in PE Files - Detection and Analysis

Start learning

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Sign up for free
Someone learning on their laptop while sitting on the floor.