Ghidra Code Analysis with Anuj Soni

Anuj Soni presents a workflow for performing code analysis with Ghidra.
To learn more about FOR610 - Reverse-Engineering Malware: Malware Analysis Tools and Techniques: www.sans.org/u/UAD

[@allTimeFavorite]

This is the best course on Ghidra that I have found. No wasted time and clear, concise explanations.

[@rohankar726]

how i download this exe file please guide me

[@sonianuj]

Thank you for the feedback!

[@TheEndOfMadness]

Excellent video. Not flashy, well edited, well spoken.

[@sonianuj]

Thank you!

[@davidbernal958]

Thanks for the video, I look forward to seeing more content of this very useful tool on FOR610 class, great idea to make this series of videos and very well made. I also like the approach of making small videos that one can see while having lunch, etc. :) Keep up the good work.

[@babybirdhome]

This is awesome, Anuj! I can't wait to see more of these.

[@sonianuj]

FYI, the MD5 for this sample is db349b97c37d22f5ea1d1841e3c89eb4.

[@neloangelo__13]

Thank you for spending your time making this video. Btw, you look like Dinesh from Silicon Valley lol.

[@Lucas01legend]

Could you provide the link to sample please?

[@Ma_X64]

Thanks a LOOOOT!

[@abandonedmuse]

Thank you! I was actually able to follow along! I learned a lot! Messing with some malware now. Heh heh. Hey you can deactivate malware with this right? I see a script called repair as well as one called clear flow and repAir. Can i fix my files with these? I have had nasty lol junk code on my machine i cannot kill for 3 years, I got ghidra to finally analyze and learn to fight back maybe make some bug bounty money...so being able to see the difference between a repaired file and the original would help me make a good case. Because otherwise I’m still a bit shaky with assembly. I love hunting though.

[@jangleman8146]

It would be handy if you actually gave the MD5 of the exe!

[@sonianuj]

Good point - the MD5 is db349b97c37d22f5ea1d1841e3c89eb4

[@Usrthsbcufeh]

MKBHD voice