Malware analysis is the process of investigating a sample malware with different tools and procedures. Malware analysis can be performed with a variety of goals. The major reasons are analysing the damage from malware, finding indicators of compromise, determining the sophistication level of the malware author, identifying the vulnerability and finding intruders or insider responsible for an attack. Generally, there are two methods of analysing the malware:
Dynamic Malware Analysis: In this method, the analyser needs to execute the malware to observe its actions. This process needs a proper environment which is logically partitioned from other hosts on network. Different tools can be used to analyse malware interaction with file system, the registry, other processes and network. The basic open source tools used for the analysis are Wireshark, Process monitor and Sys Internals. These tools monitor the behaviour of whole computer rather the just malicious code. During examination, analysers must filter out the normal background activities which are not attributable to malware.
Static Malware Analysis: This method of analysis is safer compared to dynamic malware analysis. In this method, there is no need of executing the malware during process. The executable code is loaded inside the disassembler in order to find the malware behaviour. Reverse engineering is also linked with Static Malware analysis. The basic example of disassembler is IDA. It covers file fingerprinting, virus scanning, packer detection, strings finding and disassembly. (Kris Kendal 2007
Some genuinely great content on this website , appreciate it for contribution. Hinda Timotheus Katherine
Wonderful article! We will be linking to this particularly great content on our website. Keep up the good writing. Correna Gaston Lat
I like your writing style truly loving this website. Patti Wiley Engle
Paragraph writing is also a fun, if you know after that you can write or else it is difficult to write. Lacie Forbes Ewell
You completed several good points there. I did specific searches on the issue and found many people go in conjunction with along with your blog. Joleen Shermie Wileen
If some one wishes expert view about running a blog after that i suggest him/her to visit this web site, Keep up the good job. Vera Alfonso Dagney
I have read so many content about the blogger lovers except this post is truly a fastidious piece of writing, keep it up. Allyson Udale Marketa
Looking forward to reading more. Great blog post. Much thanks again. Really Great. Francoise Karlis Benzel
Way cool! Some extremely valid points! I appreciate you writing this post plus the rest of the site is very good. Bernadine Trefor Borreri