answers for these

Tues., Thurs., 5:00 - 6:50 p.m. Malware Reverse Engineering - HW1 NOTE: - Download the malware sample inside the Windows XP/7 VM. - NEVER on your host machine. - The download link of the malware samples used in Assignment 1 is https://clemson.box.com/s/7afv8vihwadvymtnlvvsf70chpinivhl Problem 1 - static analysis ( 25 pts): Lab 1-4 (page 28) in the textbook. The name of the malware sample is Assignment11.malware. Problem 2 - static analysis ( 15 pts): Perform basic static analysis on the given malware (Assignment1-2.malware) and then answer the following questions: 1. What is the md5sum? What of interest does VirusTotal Report? 2. List a few imports or sets of imports and describe how the malware might use them. 3. What are a few strings that stick out to you and why? Problem 3 - code reading (15 pts): What is the purpose of the following code? How is it used by malware? Problem 4 - dynamic analysis (45 pts): Perform basic dynamic analysis on the malware of Problem 2 (Assignment1-2.malware) and then answer the following questions: 1. What happens when you run this malware? Is it what you expected and why? 2. Name a procmon filter and why you used it. 3. Are there any host-based signatures? (Files, registry keys, processes or services, etc). If so, what are they? 4. Are there any network-based signatures? (URLs, packet contents. etc) If so, what are they? 5. Is there anything that impeded your analysis? How so? How might you overcome this? 6. What do you think is the purpose of this malware