Ethical Hacking

17.3    Malware Analysis

Malware analysis refers to the examination of malware to understand how it works, how it spreads, and what effects it has. This involves analyzing the damage caused by malware, the systems it attacks, and the mechanisms it uses for camouflage and persistence. The goal is to develop protective measures, close security gaps, and clean up affected systems.

We distinguish between two different types of malware analysis:

• In static malware analysis, the malware code is examined without executing it. This is done through reverse engineering or by analyzing signatures and hash values.

• Dynamic malware analysis, on the other hand, observes the malware’s behavior during execution in a controlled environment, such as a sandbox ...