MISC

Question 1

Name few most common Debuggers and Disassembler?

Answer 1

IDA pro, Olly Debugger, Immunity Debugger, Radare2 , GDB debugger, x64 DBG, Binary Ninja

Question 2

What is the main difference between debugger and disassembler?

Answer 2

Main difference between debugger and disassembler is that debugger execute the program and analyze it during run time, whereas disassembler perform the static analysis and provides assembly of provided binary.

Question 3

Which is the common section utilized by droppers to embed malicious file?

Answer 3

Droppers mostly use .rsrc (resources) section for embedding file to drop and hide with techniques like obfuscation.

Question 4

What is historical significance of “MZ” bytes in PE header file?

Answer 4

They are the initials of “Mark Zbikowski” former and one of the prominent architect of MS-DOS

Question 5

Do IDA pro loads the resource section by default ?

Answer 5

No, This is not happens when we do static analysis since it may result in some problems.