Malware Analysis and Detection Engineering: A Comprehensive Approach to Detect and Analyze Modern Malware

© Abhijit Mohanta, Anoop Saldanha 2020

A. Mohanta, A. SaldanhaMalware Analysis and Detection Engineeringhttps://doi.org/10.1007/978-1-4842-6193-4_5

5. Windows Internals

Abhijit Mohanta¹  and Anoop Saldanha²

(1)

Independent Cybersecurity Consultant, Bhubaneswar, Odisha, India

(2)

Independent Cybersecurity Consultant, Mangalore, Karnataka, India

 

Malware misuses and manipulates OS functionalities and features. A malware analyst needs to be aware of all of it. Operating systems and Windows internals are vast subjects, and we need not digest all of it. This chapter focuses on selective Windows operating system fundamentals, which are needed for a malware analyst. In this chapter, we cover system directories, objects, handles, and mutexes, and important system ...