An investigator has acquired packed software and needed to analyze it for the presence of malice. Which of the following tools can help in finding the packaging software used?

The correct answer is B. PEiD. PEiD (PE Identifier) is a tool specifically designed to detect packers, cryptors, and compilers applied to PE (Portable Executable) files. It contains a large signature database of over 600 packer/compiler signatures and identifies which packing tool was used on an executable…

Submitted by ravi_2018· Apr 18, 2026Malware Forensics

Question

Options

ASysAnalyzer
BPEiD
CComodo Programs Manager
DDependency Walker

How the community answered

(39 responses)

B
92% (36)
C
5% (2)
D
3% (1)

Explanation

PEiD (PE Identifier) is a tool specifically designed to detect packers, cryptors, and compilers applied to PE (Portable Executable) files. It contains a large signature database of over 600 packer/compiler signatures and identifies which packing tool was used on an executable - critical for malware analysis since packed files hide their true code until unpacked at runtime. SysAnalyzer is a dynamic analysis tool, Dependency Walker shows DLL dependencies, and Comodo Programs Manager is an application manager - none identify packers.

Topics

#Malware analysis#Packed executables#Packer identification#PEiD

Community Discussion

No community discussion yet for this question.

Full 312-49 Practice