Reverse Engineering & Malware Analysis Labs
Archived lab series covering static and dynamic malware analysis, reverse engineering workflow, behavioral observation, indicators of compromise, and professional reporting using Flare VM and Ghidra.
Scope of the work
Archived lab series covering static and dynamic malware analysis, reverse engineering workflow, behavioral observation, indicators of compromise, and professional reporting using Flare VM and Ghidra.
Where it stands
Archived coursework and lab documentation. These records describe controlled learning exercises.
Recorded work
completedProduced professional malware-analysis documentation
Converted lab findings into structured reports with executive summaries, technical analysis, observed behaviors, indicators of compromise, screenshots, evidence notes, and defensive interpretation.
completedPerformed dynamic behavior and system-change analysis
Observed malware behavior with process, file-system, registry, and network-monitoring tools, then compared pre/post execution artifacts to document persistence attempts, dropped files, external connections, and host-level changes.
completedPerformed static analysis and reverse engineering pass
Used tools such as Ghidra, FLOSS, PE inspection, strings, imports, and function review to identify program behavior, suspicious capabilities, embedded indicators, and likely execution flow.
completedEstablished malware-analysis lab workflow
Built a repeatable analysis process using Flare VM tooling, isolated execution, baseline snapshots, static triage, dynamic observation, and structured evidence capture for safe lab analysis.
Next steps
This record is retained as completed or archived work; no next phase is specified.