Ethical Hacking Malware Analysis 1

Question 1

What is the primary difference between static and dynamic malware analysis?

Accepted Answer

Static analysis examines code without execution; dynamic analysis observes malware behavior during execution

Answer

Static analysis examines malware code, strings, and structure without executing it, while dynamic analysis runs the malware in a controlled environment to observe its runtime behavior.

Question 2

Which type of malware replicates itself by attaching its code to legitimate executable files?

Accepted Answer

Virus

Answer

A virus attaches itself to legitimate files and spreads when infected files are executed, requiring a host file to propagate unlike worms which self-replicate independently.

Question 3

What does a keylogger do?

Accepted Answer

Records keystrokes to capture passwords and sensitive input

Answer

A keylogger records all keystrokes made on an infected system, capturing passwords, credit card numbers, and other sensitive data typed by the victim.

Question 4

Which sandbox tool is widely used by penetration testers and malware analysts for automated dynamic malware analysis?

Accepted Answer

Cuckoo Sandbox

Answer

Cuckoo Sandbox is an open-source automated malware analysis system that detonates suspicious files in an isolated VM and reports on file system changes, network activity, and API calls.

Question 5

What is 'packing' in the context of malware evasion?

Accepted Answer

Compressing or encrypting malware to hide its true code from antivirus detection

Answer

Packers compress or encrypt malware executables at rest, only unpacking the true payload in memory at runtime, making static signature detection ineffective.

Ethical Hacking Practice Test

Ethical Hacking Practice Test

Ethical Hacking Malware Analysis 1