Malware Analysis Basics
The Goal of Malware Analysis
The purpose of malware analysis is usually to provide the information you need to respond to a network intrusion.
Malware Analysis Techniques
There are two fundamental approaches to malware analysis:
- Static
- Dynamic
Basic Static Analysis
- Basic static analysis consists of examining the executable file without viewing the actual instructions. Basic static analysis can confirm whether a file is malicious, provide information about its functionality, and sometimes provide information that will allow you to produce simple network signatures.
- Basic static analysis is straightforward and can be quick, but its largely ineffective against sophisticated malware, and it can miss important behaviors.