hard20 pts · first answer countsmalware-analysis

Reading static analysis results

Static analysis of a Windows executable shows: very high entropy (about 7.9) in the main section, only a few imports such as LoadLibraryA and GetProcAddress, and almost no readable strings. What is the best conclusion?

A.The file is a harmless text document renamed to .exeB.The file is digitally signed, so it must be safeC.The file was compiled in debug modeD.The binary is likely packed or encrypted, so dynamic analysis in a sandbox or unpacking is needed to see its real behaviour

Discussion 0

Join free to post in the discussion.

Reading static analysis results

Discussion 0

Related questions