Memory Injections – CompTIA Security+ SY0-701 – 2.3

Which of the following is a legitimate example of a Windows system DLL?

• kernel32.dll

• spotifyhelper.dll

• photoshop.dll

• usercredentials.dll

Software must be loaded into memory before it can execute on a computer.

• True

• False

• Sometimes

• Only if it's a large program

What is a buffer in memory?

• Temporary storage during data transfers

• A permanent storage solution

• A type of computer virus

• A method for data encryption

What are the three key stages software goes through to execute on a computer?

• Loaded from disk → into memory → processed by the CPU

• Installed on the hard drive → opened by the user → executed by the software

• Downloaded from the internet → saved to desktop → run by the operating system

• Compiled into machine code → loaded into RAM → executed by the GPU

DLLs can only be used by one application at a time.

• True

• False

• Only in older versions of Windows

• Only if they are not shared

What happens after a DLL is successfully injected?

• The malicious code runs within the legitimate process

• The system crashes immediately

• The DLL is removed from memory

• The application becomes unresponsive

Why does memory injection help malware avoid detection?

• It hides inside a legitimate process

• It encrypts its code

• It uses a complex algorithm

• It operates only in offline mode

What role does the CPU play in executing software?

• It processes the instructions loaded into memory

• It stores data permanently

• It manages the power supply of the computer

• It connects the input and output devices

Why are DLLs important for malware?

• They can be loaded by processes to execute malicious code

• They are used to store user data securely

• They help in improving system performance

• They are essential for software updates

How can malware execute in memory?

• As a separate process or by injecting into an existing one

• By encrypting itself and hiding in the file system

• Through a web browser exploit

• By modifying the operating system kernel