Static Analysis Fundamentals GREM Practice Questions (Page 10)

Questions 46–49

1. 46foundation · easy

   Which of the following is an example of a function that might appear in the export table of a DLL?

   • ACreateFileW
   • BStartAddress
   • CA custom function like 'DecryptData'
   • DDllMain
   Reveal Solution Discussion Select an answer first
2. 47foundation · easy

   What type of strings does the 'strings' utility extract by default?

   • AOnly Unicode strings
   • BAll binary data sequences
   • COnly printable ASCII strings of a minimum length
   • DOnly strings that are URLs or IP addresses
   Reveal Solution Discussion Select an answer first
4. 48foundation · easy

   Which of the following is a static indicator of anti-debugging techniques in a PE file?

   • AImport of the function IsDebuggerPresent
   • BA large number of exported functions
   • CA high entropy section
   • DA compilation timestamp in the past
   Reveal Solution Discussion Select an answer first
5. 49foundation · easy

   What is the primary characteristic of static analysis in malware analysis?

   • AExamining the binary without executing it to gather information
   • BDebugging the malware to trace its execution flow
   • CMonitoring network traffic generated by the malware
   • DExecuting the sample in a controlled environment to observe its behavior
   Reveal Solution Discussion Select an answer first