Malware Analysis: Static Analysis

Which tool is NOT used for identifying strings within a malware sample?

• Strings

• PE Studio

• Floss

• HashCalc

Which hash algorithm is not commonly used to identify malware samples?

• MD5

• Tiger

• SHA256

• SHA1

The term "Defanged" means

• Analyzing the behavior of malware

• Making malware harmless so that it is not accidently detonated

• Arming malware so that it can be detonated

• The process where Anti-Virus software removes malware from a computer

The common password used to protect malware samples when archived

• qwerty

• password

• infected

• Pa55w0rD!

What should you do with your virtual machine before detonating malware?

• Reboot

• Enable Windows Defender

• Create a Snapshot

• Suspend

What is a common website used to identify malware using hash values?

• viruslists.com

• virustotal.com

• virussum.com

• virusadditions.com

Malware developers use encoding schemes such as base64 to do what with strings?

• Turn them into integers

• Remove them from portable executables

• Make them easier to find

• Obfuscate

What is the file signature of an executable?

• 4D 5A

• FF D8 FF

• 50 4B

• 67 A4

Which of the following tools can be used to examine the header of a PE file for information?

• PE Studio

• PE View

• PE ID

• Detect it Easy

Malware developers pack malware as a means of obfuscation and evasion. Which of the following is a packer used to pack malware?

• UPC

• Packer

• UPX

• UPS