Many of the tools commonly used for conducting malware analysis can be categorized as follows:
- Disassemblers (such as Disasm and IDA)
- Debuggers (such as OllyDbg, WinDbg, and IDA)
- System monitors (such as Process Monitor and Process Explorer)
- Network monitors (such as TCP View, Wireshark, and tcpdump)
- Unpacking tools and Packer Identifiers (such as PEiD)
- Binary and code analysis tools (such as PEView, PE Explorer, LordPE, and ImpREC)