Ch-3-Dynamic Analysis Techniques

What is the primary objective of dynamic analysis?

• To create malware samples

• To analyze malware's static code

• To analyze malware's runtime behavior

• To compile malware code

What is a sandbox in the context of dynamic analysis?

• A programming language for malware analysis

• A physical location for malware storage

• A virtualized environment for executing malware safely

• A type of malware detection tool

Which of the following is NOT a basic technique of dynamic analysis?

• Sandboxing

• Static code analysis

• Memory analysis

• Debugging techniques

What does memory analysis primarily focus on?

• Analyzing network traffic

• Identifying malware-related artifacts in RAM

• Examining static code

• Creating malware samples

Which technique allows analysts to pause malware execution at specific points?

• Code injection

• Breakpoints

• Stepping

• Sandboxing

What is a software breakpoint?

• A breakpoint that does not affect the code

• A breakpoint that uses hardware registers

• A breakpoint that modifies the code being debugged

• A breakpoint that monitors memory access

What is the main advantage of hardware breakpoints?

• More flexible than software breakpoints

• Can be set on any part of the code

• Less likely to be detected by malware

• Easier to set than software breakpoints

What is the purpose of conditional breakpoints?

• To halt execution at any time

• To track all API calls

• To monitor all memory accesses

• To pause only when a specific condition is met

Which tool is commonly used for memory analysis?

• Volatility

• OllyDbg

• Wireshark

• x64dbg

What does dynamic malware analysis help identify?

• Malware's origin and author

• Malware's encryption methods

• Malware's runtime behavior and impact

• Malware's static code structure