Reference Books

• Practical Malware Analysis — Sikorski and Honig (No Starch Press).
• The classic. Windows-focused, static + dynamic, great labs.
• Our primary companion for PE analysis, debugging, and behavior.
• Learning Malware Analysis — Monnappa K A (Packt).
• Modern tooling, memory forensics, code injection, rootkits.
• Excellent for the dynamic and injection portions of the course.
• Supplemented by vendor threat reports, MITRE ATT&CK, and current CVE / campaign write-ups.