Reverse Engineering Malware 101
Looks good, one comment on tooling though:Don't screw around with other .NET decompilers, use dnSpy.https://github.com/0xd4d/dnSpyIt's fully open source, integrates with deobfuscators and includes a binary-level debugger which doesn't require VS separately. Plus it lets you patch assemblies and export debugged data easily which is how I extract most .NET-based packers these days.