Chapter 5: Advanced Static Analysis – Out of the White Noise
Earlier, in Chapter 2, Static Analysis – Techniques and Tooling, we covered some of the more basic aspects of the static analysis of binaries and files that may be malware and defined static analysis – the act of obtaining file metadata and intelligence without actually executing the file.
In this chapter, you'll have the opportunity to test your advanced knowledge of static analysis in order to determine the characteristics of an unknown, custom piece of malware.
In this chapter, we'll examine the following topics:
- Dissecting the PE file format
- Examining packed files and packers
- Utilizing NSA's Ghidra for static analysis
