Basic Dynamic Analysis 7

The document discusses performing basic dynamic analysis on a Windows virtual machine. It describes opening an executable file in PEview to analyze imported DLLs and functions. It also details examining the file's strings for readable registry locations, URLs, and other clues. The document suggests dynamic analysis would be the best way to learn more since the file's strings are surprisingly readable.

Uploaded by

Sugita Jaya

We take content rights seriously. If you suspect this is your content, claim it here.

Available Formats

Download as PDF, TXT or read online on Scribd

0% found this document useful (0 votes)

18 views1 page

Basic Dynamic Analysis 7

Uploaded by

Sugita Jaya

We take content rights seriously. If you suspect this is your content, claim it here.

Available Formats

Download as PDF, TXT or read online on Scribd

You are on page 1/ 1

5/25/24, 9:35 AM 5.

Basic Dynamic Analysis

5. Basic Dynamic Analysis

What you need:

A Windows 2008 Server virtual machine

NOTE: Windows 7 will not work for this project!

Recommended: the textbook: "Practical Malware Analysis"

Purpose
You will practice the techniques in chapter 3.

This project follows Lab 3-1 in the textbook.

Task 1. Basic Static Analysis

Using PEview
Open Lab03-01.exe in PEview. As shown below, the only DLL imported is kernel32.dll, and the only function imported is ExitProcess. That doesn't tell
us much--perhaps this malware is packed and the real imports will come at runtime.

Using Strings
Examine the strings in Lab03-01.exe and find these items, as shown below.

SOFTWARE\Classes\http\shell\open\commandV -- A registry location

www.practicalmalwareanalysis.com -- a URL
VideoDriver

These readable strings are surprising--if the malware were packed, the strings would not be readable. Something strange is going on, and the easiest way
to learn more is dynamic analysis.

Task 2. Preparing for Dynamic Analysis

https://samsclass.info/126/proj/pDC5.htm 1/7

5) Basic Dynamic Analysis
100% (1)
5) Basic Dynamic Analysis
7 pages
Chapter 3. Basic Dynamic Analysis
No ratings yet
Chapter 3. Basic Dynamic Analysis
12 pages
ch0 1
No ratings yet
ch0 1
72 pages
Basic Dynamic Analysis
No ratings yet
Basic Dynamic Analysis
1 page
CMSC 449 - Lec2 - Basic Static Analysis
No ratings yet
CMSC 449 - Lec2 - Basic Static Analysis
28 pages
Malware Analysis
No ratings yet
Malware Analysis
14 pages
Static Malware Analysis Techniques
No ratings yet
Static Malware Analysis Techniques
17 pages
(Part2) Malware Incident Response Dynamic Analysis - 1
No ratings yet
(Part2) Malware Incident Response Dynamic Analysis - 1
31 pages
Practical Malware Analysis
No ratings yet
Practical Malware Analysis
65 pages
Fin - MW - RP - Phan Van Quy
No ratings yet
Fin - MW - RP - Phan Van Quy
8 pages
Malware Analysis
No ratings yet
Malware Analysis
15 pages
Malware Analysis (Autosaved)
No ratings yet
Malware Analysis (Autosaved)
18 pages
ch2 3
No ratings yet
ch2 3
45 pages
ch0 1
No ratings yet
ch0 1
78 pages
DFOR510 Week13 UnknownCodeAnalysis
No ratings yet
DFOR510 Week13 UnknownCodeAnalysis
37 pages
Malware Analysis for Analysts
No ratings yet
Malware Analysis for Analysts
86 pages
ch0 1
No ratings yet
ch0 1
75 pages
Systembc Root Access Trojan Malware Analysis Report
No ratings yet
Systembc Root Access Trojan Malware Analysis Report
17 pages
Practical Malware Analysis - Part 2 Dynamic Analysis
No ratings yet
Practical Malware Analysis - Part 2 Dynamic Analysis
33 pages
Malware Analysis
No ratings yet
Malware Analysis
24 pages
Malware Analysis
No ratings yet
Malware Analysis
35 pages
Module 2 Static Analysis
No ratings yet
Module 2 Static Analysis
13 pages
Malware Analysis: Anusha GR
No ratings yet
Malware Analysis: Anusha GR
18 pages
Malware Analysis Essentials
No ratings yet
Malware Analysis Essentials
28 pages
Malware DynamicAnalysis 1
No ratings yet
Malware DynamicAnalysis 1
31 pages
Practical 1
No ratings yet
Practical 1
10 pages
Malware Analysis Lab 1
No ratings yet
Malware Analysis Lab 1
3 pages
Malware Analysis 19 - 03 - 2025 - DDDDDDDDDADD
No ratings yet
Malware Analysis 19 - 03 - 2025 - DDDDDDDDDADD
47 pages
Malware Analysis
100% (1)
Malware Analysis
26 pages
Malware Analysis
100% (1)
Malware Analysis
4 pages
Introduction To Malware
No ratings yet
Introduction To Malware
86 pages
Donut Malware Analysis
No ratings yet
Donut Malware Analysis
161 pages
Lesson 3 - Static & Dynamic Analysis
No ratings yet
Lesson 3 - Static & Dynamic Analysis
33 pages
Lab 8
No ratings yet
Lab 8
23 pages
Malware Analysis in Virtual Machines
No ratings yet
Malware Analysis in Virtual Machines
45 pages
Lab 1
No ratings yet
Lab 1
10 pages
IAM302 - IA1804 - Lab 8 - Nguyễn Viết Quân
No ratings yet
IAM302 - IA1804 - Lab 8 - Nguyễn Viết Quân
10 pages
Week 4
No ratings yet
Week 4
19 pages
Computer Security: Identifying Malicious Patterns
No ratings yet
Computer Security: Identifying Malicious Patterns
31 pages
Lab4 (Lab03-02) DLL Analysis
No ratings yet
Lab4 (Lab03-02) DLL Analysis
4 pages
Malware Analysis in Virtual Machines
No ratings yet
Malware Analysis in Virtual Machines
45 pages
Malware Analysis Workshop Guide
No ratings yet
Malware Analysis Workshop Guide
13 pages
Malware Analysis Guide
No ratings yet
Malware Analysis Guide
39 pages
Malware Analysis
No ratings yet
Malware Analysis
45 pages
Tools
No ratings yet
Tools
7 pages
Day3 Session1 Lab1 (Static Malware Analysis)
No ratings yet
Day3 Session1 Lab1 (Static Malware Analysis)
9 pages
ch2 3
No ratings yet
ch2 3
45 pages
Malware Analysis Chapter 1 Guide
No ratings yet
Malware Analysis Chapter 1 Guide
65 pages
Dynamic Malware Analysis Guide
No ratings yet
Dynamic Malware Analysis Guide
56 pages
All Malwares Lectures
No ratings yet
All Malwares Lectures
51 pages
Untitled Document 1
No ratings yet
Untitled Document 1
39 pages
LAB 8 Cao Duc Anh HE180550 IAM302
No ratings yet
LAB 8 Cao Duc Anh HE180550 IAM302
12 pages
Comprehensive Malware Analysis Guide
No ratings yet
Comprehensive Malware Analysis Guide
33 pages
Dynamic Questions
No ratings yet
Dynamic Questions
1 page
Malware Analysis
No ratings yet
Malware Analysis
10 pages
Cybersecurity Bootcamp Malware Analysis
No ratings yet
Cybersecurity Bootcamp Malware Analysis
26 pages
Paper - 1 - 179999913001 - 9117-Article Text-15506-1-10-20210129
No ratings yet
Paper - 1 - 179999913001 - 9117-Article Text-15506-1-10-20210129
9 pages
Unit 1 Part 2
No ratings yet
Unit 1 Part 2
27 pages
Rema 142
No ratings yet
Rema 142
8 pages
Managing Water Irigation and Drainage - 6
No ratings yet
Managing Water Irigation and Drainage - 6
2 pages
Managing Water Irigation and Drainage - 7
No ratings yet
Managing Water Irigation and Drainage - 7
2 pages
Managing Water Irrigation and Drainage 1
No ratings yet
Managing Water Irrigation and Drainage 1
5 pages
Managing Water Irigation and Drainage - 4
No ratings yet
Managing Water Irigation and Drainage - 4
2 pages
Irrigation System Terpadu 3
No ratings yet
Irrigation System Terpadu 3
2 pages
How To Use Our Landscape 1
No ratings yet
How To Use Our Landscape 1
2 pages
Civil Engineering Formulas - Ultimate Guide For Construction 1
No ratings yet
Civil Engineering Formulas - Ultimate Guide For Construction 1
4 pages
Ini What For What
No ratings yet
Ini What For What
1 page
Civil Engineering Software Guides
No ratings yet
Civil Engineering Software Guides
9 pages