{
  "added_at": "2026-11-06",
  "additional_evidence_urls": [
    "https://github.com/hasherezade/malware_training_vol1/tree/acf72d45009140fed514c1dfa429122f01a2f6c0/exercises",
    "https://github.com/hasherezade/malware_training_vol1/tree/acf72d45009140fed514c1dfa429122f01a2f6c0/slides"
  ],
  "category": "learning",
  "description_en": "Slides and exercises for a Windows malware analysis training that builds an understanding of common malware techniques through programming, reverse engineering and Windows internals, and shows how analysis tools are used for particular goals. Module 1 covers compilation, the PE format, processes, WoW64, shellcode and PE loaders; module 2 introduces malware missions and tactics, hooking, persistence and banking trojans; module 3 introduces evasion and self-defence and fingerprinting, with obfuscation, anti-hooking, deobfuscation and kernel-mode components planned.",
  "description_zh": "一套 Windows 恶意软件分析培训的幻灯片与练习，通过编程、逆向工程和 Windows 内部机制帮助学员理解常见的恶意软件技术，并演示如何用各种分析工具达成特定分析目标。第 1 单元涵盖编译、PE 格式、进程、WoW64、shellcode 和 PE 加载器；第 2 单元介绍恶意软件的目标与战术、挂钩、持久化和银行木马；第 3 单元介绍规避与自我保护以及指纹识别，混淆、反挂钩、反混淆和内核态组件等内容尚在计划中。",
  "entry_url": "https://awesomerea.org/resources/malware-training-vol1/",
  "entry_url_zh": "https://awesomerea.org/zh/resources/malware-training-vol1/",
  "evidence_url": "https://github.com/hasherezade/malware_training_vol1/blob/acf72d45009140fed514c1dfa429122f01a2f6c0/README.md",
  "group": "learn",
  "id": "malware-training-vol1",
  "json_url": "https://awesomerea.org/resources/malware-training-vol1/record.json",
  "kind": "learning-resource",
  "markdown_url": "https://awesomerea.org/resources/malware-training-vol1/index.md",
  "markdown_url_zh": "https://awesomerea.org/zh/resources/malware-training-vol1/index.md",
  "name": "Windows Malware Analysis training, volume 1 (malware_training_vol1)",
  "name_zh": "Windows 恶意软件分析培训第一卷（malware_training_vol1）",
  "record_type": "resource",
  "relationship": "learning",
  "requirement_facets": [
    "prerequisites",
    "limits",
    "license"
  ],
  "requirements": [
    "Aimed at people who already know the basics of programming and reverse engineering and want to enter Windows malware analysis. Slides are in slides/ and exercises in exercises/.",
    "The README marks the material as a work in progress: several topics still lack slides or exercises. The reviewed main commit dates from 2024-07-01.",
    "Published under the Creative Commons Attribution 4.0 license, per the README; the repository has no license file."
  ],
  "requirements_zh": [
    "面向已掌握编程和逆向工程基础、希望进入 Windows 恶意软件分析领域的读者。幻灯片位于 slides/，练习位于 exercises/。",
    "README 标明这套材料仍在编写中：有几个主题尚无幻灯片或练习。所审阅的 main 分支提交日期为 2024-07-01。",
    "据 README 采用知识共享署名 4.0（CC BY 4.0）许可；仓库中没有许可证文件。"
  ],
  "targets": [
    "binary"
  ],
  "url": "https://github.com/hasherezade/malware_training_vol1",
  "verification": "source-reviewed",
  "verified_at": "2026-11-06"
}