Static Malware Analysis DFE Practice Questions (Page 11)

Questions 51–51

1. 51application · medium

   During static analysis of a suspicious binary, you extract printable strings and find a URL to a file-sharing site, a local file path, and a registry key. What is the most reasonable interpretation of these findings?

   • AThe binary is safe because the URL points to a well-known file-sharing site.
   • BThe strings are likely artifacts of the compiler and have no analytical value.
   • CThe binary is definitely malware because it contains a URL and a registry key.
   • DThe binary may perform network communication, file system operations, and registry modifications, but these are only indicators that need corroboration.
   Reveal Solution Discussion Select an answer first