Learning Malware Analysis

2.1 Loading Binary in IDA

To load an executable, Launch IDA Pro (right-click and select Run as administrator). When you launch IDA, it will briefly display a screen showing your license information; immediately after that, you will be presented with the following screen. Choose New and select the file you wish to analyze. If you select Go, IDA will open the empty workspace. To load a file, you can either drag and drop or click on File | Open and select the file:

The file that you give to IDA will be loaded into the memory (IDA acts like a Windows loader). To load the file into the memory, IDA determines the best possible loaders, and from ...