Basic Static Analysis Quiz

In static analysis, you are analyzing code but not running it.

• True

• False

In Port Monitoring the following command is used to look for connection established to unknown or suspicious IP addresses.

• netstat -n

• netstat-ns

• netstat-na

• netstat-sn

What is the purpose of anti-virus software?

• To make chocolate
• To prevent hackers from accessing the network
• To block unauthorised connections to the network
• To prevent a virus from attacking the network

Which of the following tool is used to find a packed file?

• PEView

• TrID

• FindPacker

• Dependency walker

Which of the following tools provide information about functions imported by a sample?

• FileType

• PEStudio

• PEView

• Dependency Walker

Which of the following linking method is used by malware to hide its malicious code from malware analyst?

• Static

• Dynamic

• Runtime

• None of the above

Which of the following tools helps a malware analyst to determine the compilation time of sample?

• PEiD

• TriD

• PEView

• Filetype

Select the features offered by PEStudio

• Imports

• Sections

• TLS_callbacks

• VirusTotal

Which of the following tools helps a malware analyst to modify PE file?

• PEStudio

• CFF Explorer

• Dependency Walker

• ExeInfo PE

Which of the following is the best for finding a packed file?

• UPX

• TrID

• PEiD

• ExeInfo PE