Malware Investigation

1. Analyze the social engineering component of the malware. Translate it. How does it try to get

people to execute it?

2. Your friend has already opened the document attachment. What happened? Is his machine

already infected? Find proof for/Argue your answer!

3. Extract the core malware and document the steps.

4. Perform a basic static analysis of the sample and document your findings. Is it packed? What

do the imports and exports tell you? Do you see anything suspicious section- wise? Interesting

strings? Remember: MSDN is your friend!

5. Analyze the sample dynamically and monitor the activity on the system. What changes? Is

anything dropped, executed or deleted? If you use Regshot, be careful to set the right scan

directory (C:)!

学术写作 技术写作 编程

项目ID： #23812632

关于项目