Suggest:

a) read volatility wiki doc
b) buy Malware Analyst's Cookbook Michael Hale Ligh et al Wiley 716 pg

lorgor