Lab 1-1 Solutions
Short Answers
These files were written specifically for this book, so as of this writing, you should not find a signature for them on VirusTotal.com. Of course, if these files become part of the antivirus signatures as a result of the publication of this book, the results will be different.
Both files were compiled on December 19, 2010, within 1 minute of each other.
There are no indications that either file is packed or obfuscated.
The interesting imports from Lab01-01.exe are
FindFirstFile,FindNextFile, andCopyFile. These imports tell us that the program searches the filesystem and copies files. The most interesting imports from Lab01-01.dll areCreateProcessandSleep. We also see that this file imports functions from WS2_32.dll ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access