A nice little series of articles on analysing a drive-by browser malware

http://coffeetocode.net/2010/02/malware-analysis-walking-tour-start/
http://coffeetocode.net/2010/02/malware-analysis-walking-tour-the-exploit/
http://coffeetocode.net/2010/03/malware-analysis-walking-tour-the-payload/

at least one more article in the series to come, so check back..