Basic Dynamic Analysis Techniques

The document discusses performing basic dynamic analysis on a Windows virtual machine. It describes opening an executable file in PEview to analyze imported DLLs and functions. It also details examining the file's strings for readable registry locations, URLs, and other clues. The document suggests dynamic analysis would be the best way to learn more since the file's strings are surprisingly readable.

Uploaded by

Sugita Jaya

We take content rights seriously. If you suspect this is your content, claim it here.

Available Formats

Download as PDF, TXT or read online on Scribd

0% found this document useful (0 votes)

7 views1 page

Basic Dynamic Analysis Techniques

Uploaded by

Sugita Jaya

We take content rights seriously. If you suspect this is your content, claim it here.

Available Formats

Download as PDF, TXT or read online on Scribd

5/25/24, 9:35 AM 5.

Basic Dynamic Analysis

5. Basic Dynamic Analysis

What you need:

A Windows 2008 Server virtual machine

NOTE: Windows 7 will not work for this project!

Recommended: the textbook: "Practical Malware Analysis"

Purpose
You will practice the techniques in chapter 3.

This project follows Lab 3-1 in the textbook.

Task 1. Basic Static Analysis

Using PEview
Open [Link] in PEview. As shown below, the only DLL imported is [Link], and the only function imported is ExitProcess. That doesn't tell
us much--perhaps this malware is packed and the real imports will come at runtime.

Using Strings
Examine the strings in [Link] and find these items, as shown below.

SOFTWARE\Classes\http\shell\open\commandV -- A registry location

[Link] -- a URL
VideoDriver

These readable strings are surprising--if the malware were packed, the strings would not be readable. Something strange is going on, and the easiest way
to learn more is dynamic analysis.

Task 2. Preparing for Dynamic Analysis

[Link] 1/7

Basic Dynamic Analysis Tools Overview
100% (1)
Basic Dynamic Analysis Tools Overview
7 pages
Monitoring Registry Activity with Wireshark
No ratings yet
Monitoring Registry Activity with Wireshark
11 pages
Dynamic Analysis with Regshot2
No ratings yet
Dynamic Analysis with Regshot2
31 pages
Malware Dynamic Analysis Techniques
No ratings yet
Malware Dynamic Analysis Techniques
20 pages
Dynamic Malware Analysis Overview
No ratings yet
Dynamic Malware Analysis Overview
48 pages
Malware Lab Configuration Guide
No ratings yet
Malware Lab Configuration Guide
23 pages
Malware Analysis Prcatical No 8 and 9
No ratings yet
Malware Analysis Prcatical No 8 and 9
16 pages
Lab 8: Malware Analysis Techniques
No ratings yet
Lab 8: Malware Analysis Techniques
10 pages
Dynamic Malware Analysis Techniques
No ratings yet
Dynamic Malware Analysis Techniques
31 pages
Malware Analysis in Virtual Machines
No ratings yet
Malware Analysis in Virtual Machines
45 pages
Dynamic Malware Analysis Techniques
No ratings yet
Dynamic Malware Analysis Techniques
26 pages
Static Malware Analysis Lab Guide
No ratings yet
Static Malware Analysis Lab Guide
6 pages
Lab13 Reva
No ratings yet
Lab13 Reva
16 pages
Dynamic Malware Analysis Techniques
No ratings yet
Dynamic Malware Analysis Techniques
41 pages
Malware Forensics: Analysis Environments
No ratings yet
Malware Forensics: Analysis Environments
43 pages
Day3 Session1 Lab1 (Static Malware Analysis)
No ratings yet
Day3 Session1 Lab1 (Static Malware Analysis)
9 pages
Dynamic Malware Analysis Lab Guide
No ratings yet
Dynamic Malware Analysis Lab Guide
15 pages
Dynamic Malware Analysis Guide
No ratings yet
Dynamic Malware Analysis Guide
8 pages
Dynamic Malware Analysis Techniques
No ratings yet
Dynamic Malware Analysis Techniques
45 pages
Practical Malware Analysis Techniques
No ratings yet
Practical Malware Analysis Techniques
10 pages
Malware Analysis in Virtual Machines
No ratings yet
Malware Analysis in Virtual Machines
45 pages
Malware Static Analysis Lab Guide
No ratings yet
Malware Static Analysis Lab Guide
8 pages
Practical Malware Analysis
No ratings yet
Practical Malware Analysis
65 pages
Lecture 3 1
No ratings yet
Lecture 3 1
72 pages
Virtual Machine Malware Analysis Guide
No ratings yet
Virtual Machine Malware Analysis Guide
45 pages
Analyzing Donut Loader Malware
No ratings yet
Analyzing Donut Loader Malware
161 pages
Basic Static Analysis
No ratings yet
Basic Static Analysis
10 pages
Basic Dynamic Analysis Techniques
No ratings yet
Basic Dynamic Analysis Techniques
12 pages
2 Malware Analysis
No ratings yet
2 Malware Analysis
2 pages
Malware Analysis Techniques and Tools
No ratings yet
Malware Analysis Techniques and Tools
12 pages
Kindly Use The Windows 10 Virtual Machine Installed in The Virtual Box
No ratings yet
Kindly Use The Windows 10 Virtual Machine Installed in The Virtual Box
7 pages
Malware Analysis Lab 1 Techniques
No ratings yet
Malware Analysis Lab 1 Techniques
10 pages
Malware Analysis Techniques Overview
No ratings yet
Malware Analysis Techniques Overview
15 pages
Mal Ware
No ratings yet
Mal Ware
14 pages
Module 1 Part 2
No ratings yet
Module 1 Part 2
56 pages
Unit2 MA
No ratings yet
Unit2 MA
13 pages
Reverse Engineering For Noobs
No ratings yet
Reverse Engineering For Noobs
10 pages
Malware Analysis in Virtual Machines
No ratings yet
Malware Analysis in Virtual Machines
45 pages
EasyChair Preprint 3373
No ratings yet
EasyChair Preprint 3373
6 pages
Malware Analysis Techniques Overview
No ratings yet
Malware Analysis Techniques Overview
86 pages
Static Analysis with Hybrid Analysis Tool
No ratings yet
Static Analysis with Hybrid Analysis Tool
43 pages
Lab Setup for Malware Analysis Guide
No ratings yet
Lab Setup for Malware Analysis Guide
8 pages
Basic Static Malware Analysis Techniques
No ratings yet
Basic Static Malware Analysis Techniques
28 pages
Malware Analysis Techniques and Tools
No ratings yet
Malware Analysis Techniques and Tools
12 pages
Malware Analysis Techniques Overview
No ratings yet
Malware Analysis Techniques Overview
72 pages
Practical Malware Analysis Course Overview
No ratings yet
Practical Malware Analysis Course Overview
4 pages
Unit 2 - MF
No ratings yet
Unit 2 - MF
34 pages
Dynamic Malware Analysis Techniques
No ratings yet
Dynamic Malware Analysis Techniques
81 pages
Full Malware Notes
No ratings yet
Full Malware Notes
7 pages
Malwareanalysis Unit 3
No ratings yet
Malwareanalysis Unit 3
6 pages
Dynamic Malware Analysis Essentials
No ratings yet
Dynamic Malware Analysis Essentials
7 pages
Introduction to Malware Analysis
No ratings yet
Introduction to Malware Analysis
65 pages
Dynamic Binary Analysis with Valgrind
No ratings yet
Dynamic Binary Analysis with Valgrind
190 pages
Regshot for Malware Dynamic Analysis
No ratings yet
Regshot for Malware Dynamic Analysis
57 pages
Dynamic Malware Analysis Techniques
No ratings yet
Dynamic Malware Analysis Techniques
56 pages
Irrigation and Drainage Management
No ratings yet
Irrigation and Drainage Management
2 pages
Managing Water for Crop Success
No ratings yet
Managing Water for Crop Success
5 pages
Above Ground Sprinkler System Guide
No ratings yet
Above Ground Sprinkler System Guide
2 pages
Using the Orbit Sprinkler Design Tool
No ratings yet
Using the Orbit Sprinkler Design Tool
2 pages
Civil Engineering Formulas Guide
No ratings yet
Civil Engineering Formulas Guide
4 pages
Free ETABS Modeling Tutorials
No ratings yet
Free ETABS Modeling Tutorials
9 pages
Stormy Night Reflections and Comfort
No ratings yet
Stormy Night Reflections and Comfort
1 page