Lecture 0

Question 1

What programming language is malware written in?

Answer 1

Can be written in any language. Software’s intention is to make the system do something it isn’t meant to do.

Question 2

What is malware analysis?

Answer 2

The art of dissecting malware to understand how it working, how to identify it and how to eliminate it in a safe environment.

Question 3

What is static analysis?

Answer 3

Analysis of the code and the structure of the program without executing it.

Question 4

What is dynamic analysis?

Answer 4

Execute the binary in an isolated environment and monitor its behavior.

Question 5

What is malware functional classification?

Answer 5

This approach tends to use the features implemented by malware to classify the tool. You likely have seen these when malware is described as backdoor, ransomware, and similar.

Question 6

What is malware familial, lineage classification?

Answer 6

This approach tends to focus on the authorship and the lineage of a malware tool. It classifies malware according to families, authorship, and similar attributes. It focuses on evolution of certain tools, and the expectation that common authorship can help inform incident response.