02 / Resources

Visual references.

Workflows, Windows internals, and binary structures. A few references to keep beside the disassembler.

01

Analysis workflow

Malware loader workflow ↗

A visual guide from binary triage to configuration extraction and communications emulation.

Excalidraw

02

Windows internals

Low-level Windows structures ↗

An illustrated reference for the low-level structures encountered while reversing Windows binaries.

Excalidraw

03

Binary reference

Portable Executable format ↗

Explore the headers, sections, and data directories of the Windows PE file format.

SVG reference