OllyDbg is a Windows tool to analyse binary files. This is good when the original source code is not available to you, which is a likely case if you have to analyse viruses and malware. OllyDbg will allow you to step through a program as it runs. For more information and to download click here.
The UI is fairly simple when you first open the program.
![OllyDbg 1](/static/7e2f637019f4315a91abd537819ab592/f2d92/ollyDbg1.png)
Once you've got it opened you'll need to open a binary file. For the purpose of this I'll be opening an exe file. Once your file's opened you'll see that the UI looks a little more busy.
![OllyDbg 2](/static/8fd6a7fd857492372e7854d79ba0a7ef/8ea22/ollyDbg2.png)
If you've never done this kind of thing before it will look a bit daunting at first and there is a skill to reading these types of files. I won't be teaching that here so we'll move onto some of the capabilities of the tool.
You are able to view a number of different aspects of an exe file.
![OllyDbg 3](/static/1d22b0cbc7fc3e26bd8be63550cc062c/1ac29/ollyDbg3.png)
Now I'll just show you a few of the different views so you get a flavour of what you're able to view.
Log data:
![OllyDbg 4](/static/17486983af1e83941daae076de6eeedd/374ac/ollyDbg4.png)
Executable Modules:
![OllyDbg 5](/static/fa4c689aba75914c2c161365aa4450c6/1ddef/ollyDbg5.png)
Memory:
![OllyDbg 6](/static/49bafabaa035f462e1f1ab75f1b0759a/08c0b/ollyDbg6.png)
Threads:
![OllyDbg 7](/static/71ece0f01fc0ad1af9c0ece45f2ed9e1/07484/ollyDbg7.png)