Reverse Engineering C++ Malware With IDA Pro

An introductory tutorial on reverse engineering C++ malware, covering classes, constructors, structs, and IDA Pro analysis techniques.

This tutorial covers the basics needed to get started with reverse engineering C++ malware. We cover classes, constructors, structs, and a few tricks to help speed up your analysis with IDA. We have a short blog post here: oalabs.openanalysis.net/2019/06/03/reverse-engineering-c-wit… ----- OALABS DISCORD discord.gg/6h5Bh5AMDU OALABS PATREON patreon.com/oalabs OALABS TIP JAR ko-fi.com/oalabs OALABS GITHUB github.com/OALabs UNPACME - AUTOMATED MALWARE UNPACKING unpac.me/#/ ----- Automated Malware Unpacking unpac.me/ The compiled example we analyzed is available on malshare here: malshare.com/sample.php?action=detail&hash=4bd19107be0e1fda5… You can download the freeware version of IDA here (sorry no decompiler): hex-rays.com/products/ida/support/download_freeware.shtml If you want to try Ghidra there is an excellent online tutorial website you can check out here: ghidra.re/online-courses/ Ghidra download: ghidra-sre.org/ Feedback, questions, and suggestions are always welcome : ) Sergei twitter.com/herrcore Sean twitter.com/seanmw As always check out our tools, tutorials, and more content over at openanalysis.net #ReverseEngineering #cpp #structs #IDAPro