A few things i would like to say

1. If you don't have a seprate machine use vmware ( i am amazed how it was missed out).

2. thhorse13 i think you missed out a very basic point, you need *skills* to study
a malware not just tools.