Malware Analysis

Which of these libraries is not normally linked from executables and may indicate malicious intent? 1 Kernel32.dll 2 Advapi32.dll 3 User32.dll 4 Gdi32.dll 5 Ntdll.dll Which technique makes an executable large? 1 Static linking 2 Runtime linking 3 Dynamic linking 4 Packing 5 Random linking What type of file is shared by many different programs? 1 Packed 2 PE 3 Wrapper 4. EXE 5 DLL What file type has a header specifying sections like .text, .data, and .rsrc? 1 Packed 2 PE 3 Wrapper 4 EXE 5 DLL Which technique finds the readable text in a file? 1 Antivirus 2 Hashes 3 Strings 4 Functions 5 Headers Which technique mathematically calculates a number that uniquely identifies a malicious file? 1 Antivirus N Hashes 3 Strings 4 Functions 5 Headers Which technique requires deliberately infecting a computer? 1 Host-based signatures 2 Antivirus signature 3 Network signature 4 Static analysis 5 Dynamic analysis Which type of malware conceals other code? 1 Backdoor N Botnet 3 Launcher 4 Rootkit 5 Scareware What type of malware spreads to other systems? 1 Backdoor 2 Botnet 3 Downloader 4 Rootkit 5 Worm Which technique involves running parts of malicious code and stopping at specified breakpoints? 1 VirusTotal 2) strings 3 Disassembler 4 Debugger 5 Static analysis