Reverse Engineering

The techniques used by TSS work from five basic perspectives: Source, Data Analysis, Presentation, Validation, and Prediction.

Request An Evaluation

Self Evaluation

Reverse Engineering

Malware researchers require a diverse skill set usually gained over time through experience and self-training. Reverse engineering (RE) is an integral part of malware analysis and research, but it is also one of the most advanced skills a researcher can have. This is one of the reasons why organizations lack reverse engineering manpower. Many researchers with a lack of experience struggle to get started in RE. Gaining a solid starting point in RE with the relevant knowledge and terminologies can be a differentiator for a researcher.

Tampa Reverse Engineering

How It Works

RE can be very time-consuming. When researching malware, you will usually not start reversing it right away. Instead, you should conduct triage malware analysis by running the malware in a sandbox, extracting strings, and more. This initial malware analysis phase can provide further context for reverse engineering if needed. For instance, you can search for specific strings in the disassembler or expect to see a certain capability that the malware displays.

If your goal is to understand malware’s capabilities, analyzing it dynamically via a sandbox will not be enough. The malware’s Command and Control (C2) could go down, the malware could depend on another file for configuration which does not exist on the machine, the malware has sandbox evasion capabilities, or the malware will only run on a certain environment. RE, which is part of advanced static malware analysis, is much more effective to achieve this goal.