QUESTION NO: 1
Analyzing the decompressed content of an RTF file is essential for what reason?
Analyzing the decompressed content of an RTF file is essential for what reason?
Correct Answer: A
Vote an answer
QUESTION NO: 2
What is the primary goal of static analysis in malware reverse engineering?
What is the primary goal of static analysis in malware reverse engineering?
Correct Answer: D
Vote an answer
QUESTION NO: 3
Which tool can be used to monitor network traffic during behavioral analysis of a malware sample?
Which tool can be used to monitor network traffic during behavioral analysis of a malware sample?
Correct Answer: B
Vote an answer
QUESTION NO: 4
When analyzing a ransomware sample you find code referencing CryptDeriveKey. What does this indicate?
When analyzing a ransomware sample you find code referencing CryptDeriveKey. What does this indicate?
Correct Answer: D
Vote an answer
QUESTION NO: 5
In the x86 calling convention, where is the return address of a function typically stored?
In the x86 calling convention, where is the return address of a function typically stored?
Correct Answer: C
Vote an answer
QUESTION NO: 6
What is the significance of finding extensive use of System.Reflection namespace in a .NET malware sample?
What is the significance of finding extensive use of System.Reflection namespace in a .NET malware sample?
Correct Answer: A
Vote an answer
QUESTION NO: 7
You see a PE section with very high entropy and no readable strings. What is the MOST likely condition?
You see a PE section with very high entropy and no readable strings. What is the MOST likely condition?
Correct Answer: B
Vote an answer
QUESTION NO: 8
Which of the following dynamic analysis tools is used to trace and debug malware execution?
Which of the following dynamic analysis tools is used to trace and debug malware execution?
Correct Answer: A
Vote an answer
QUESTION NO: 9
What is the primary use of a debugger in the context of unpacking malware?
What is the primary use of a debugger in the context of unpacking malware?
Correct Answer: A
Vote an answer