Malware Analysis Basics

Summary

Examining suspicious files to understand their behavior and impact — static analysis (examining the file without running it) and dynamic analysis (observing it run in an isolated sandbox) are the two main approaches.

• 1Analyze a known-safe sample file using static analysis techniques (strings, hashes) in a lab.
• 2Learn why dynamic analysis must always happen in an isolated, disposable sandbox environment.
• 3Understand malware analysis as a specialized skill many security professionals only touch occasionally.