educationJan 25, 202614:54pending
Course 20 - Malware Analysis: Identifying and Defeating Code Obfuscation | Episode 1: Defeating Malware Obfuscation: Fundamentals, Impact
About this episode
In this lesson, you’ll learn about:
You can listen and download our episodes for free on more than 10 different platforms:
https://linktr.ee/cybercode_academy
- The Purpose of Code Obfuscation:
- Defining obfuscation as the practice of intentionally making software difficult to read or analyze.
- How malware authors use obfuscation to hide strings, functions, payloads, and command-and-control communication.
- The concept of “raising the bar” for analysts by increasing the time and effort required to understand malicious intent.
- Legitimate uses of obfuscation for protecting intellectual property in commercial software.
- Obfuscation Across Programming Architectures:
- The differences between native code (C, C++, Assembly) and interpreted or managed code (Java, .NET, Python).
- Why native binaries are harder to analyze due to reliance on disassembly rather than source-like output.
- How interpreted code can often be decompiled into structures that closely resemble the original source, making it generally easier to reverse.
- Common Obfuscation Techniques:
- Using meaningless variable and function names to disrupt manual analysis and signature-based detection.
- Injecting junk code that adds complexity without affecting functionality.
- Hiding indicators through string encoding or encryption that only resolves at runtime.
- Manipulating control flow with misleading jumps and unreachable branches to confuse analysis tools.
- Skills, Environments, and Tools for Deobfuscation:
- The importance of understanding Assembly language, the Windows API, and the Portable Executable (PE) format.
- Setting up safe analysis environments using Windows and Linux virtual machines, including REMnux.
- Leveraging industry-standard tools such as IDA Pro, Ghidra, dnSpy, JD-GUI, and debuggers for static and dynamic analysis.
You can listen and download our episodes for free on more than 10 different platforms:
https://linktr.ee/cybercode_academy
Get every episode summarized
Each time CyberCode Academy publishes, we email you a written briefing from the transcript — the topics, who appeared, and any specific claims, with the ad reads skipped.
Email me new episodesFree for 3 shows. No card needed.
No transcript yet
This episode has not been transcribed. Request it and it moves to the front of the queue.
More episodes
More from CyberCode Academy
Course 42 - Mobile Malware Analysis Fundamentals | Episode 13: Designing and Arc...
CyberCode Academy
Sep 9, 202617:34pending
Course 42 - Mobile Malware Analysis Fundamentals | Episode 12: Dynamic Analysis...
CyberCode Academy
Sep 8, 202628:08completed
Course 42 - Mobile Malware Analysis Fundamentals | Episode 11: Dynamic Analysis...
CyberCode Academy
Sep 7, 202624:15completed
Course 42 - Mobile Malware Analysis Fundamentals | Episode 10: The Essentials of...
CyberCode Academy
Sep 6, 202623:12pending