Reverse Engineering Malware 101
Looks good, one comment on tooling though:<p>Don't screw around with other .NET decompilers, use dnSpy.<p><a href="https://github.com/0xd4d/dnSpy" rel="nofollow">https://github.com/0xd4d/dnSpy</a><p>It's fully open source, integrates with deobfuscators and includes a binary-level debugger which doesn't require VS separately. Plus it lets you patch assemblies and export debugged data easily which is how I extract most .NET-based packers these days.