Sigreturn Labs
Contact
Five days that turn engineers into malware analysts. A hands-on, practical deep dive into malware analysis and reverse engineering, built and taught by a researcher who does this work in the field. You get a ready-to-go analysis lab on a VM we provide, so all you bring is a laptop. On-site or remote.
From an empty lab to breaking real ransomware. Five days of doing, not watching.
From an empty lab to breaking real ransomware. Every block is doing, not watching.
Introduction & lab setup
Hands-onThreat landscape & malware economy
Windows artefacts & persistence
Hands-onPE format, compilation & linking, Windows internals
Hands-onStatic analysis basics
Hands-onDynamic analysis basics
Hands-onAssembly language introduction
Hands-onProcess memory management & calling conventions
Hands-onReverse engineering
Hands-onDebugging
Hands-onAdvanced injection techniques
Cryptography: theory & applied
Anti-RE, anti-debugging & anti-sandbox
Hands-onPacking
Hands-onScript-based malware
Attack process & network, stealers
Ransomware practical activity
Hands-onThreat & IOCs, wrap-up & Q&A
Departures
No setup tax. We provide a complete, pre-built virtual machine with every exercise, sample, and tool already in place. You spend the week analysing malware, not installing it. All you need is a laptop that can run a Windows VM in VirtualBox.
By the end of the week, the work is in your hands, not just in your notes.
€3,000
per person, per 5-day session
Delivered on-site at your offices or fully remote, for an individual or a whole team. A working knowledge of C and a scripting language helps, and some basic digital-forensics experience is welcome, but no prior reverse-engineering experience is required. We provide the full lab VM; you bring a laptop that can run it. Get in touch for available dates, group size, and a tailored agenda.
Tell us your team and your timeline, and we will set up the dates and tailor the agenda.
Built and taught by the same researcher, never a subcontracted trainer. Who teaches it.