nerdexam
EC-Council

312-50V10 · Question #745

Analyst is investigating proxy logs and found out that one of the internal user visited website storing suspicious java scripts. After opening one of them, he noticed that it is very hard to understan

The correct answer is C. Obfuscation. Obfuscation is the technique of deliberately making source code difficult to read and analyze while preserving its functionality, commonly used by malware authors to hinder reverse engineering.

Evading IDS, Firewalls, and Honeypots

Question

Analyst is investigating proxy logs and found out that one of the internal user visited website storing suspicious java scripts. After opening one of them, he noticed that it is very hard to understand the code and that all codes differ from the typical java script. What is the name of this technique to hide the code and extend analysis time?

Options

  • ASteganography
  • BCode encoding
  • CObfuscation
  • DEncryption

How the community answered

(20 responses)
  • B
    5% (1)
  • C
    95% (19)

Why each option

Obfuscation is the technique of deliberately making source code difficult to read and analyze while preserving its functionality, commonly used by malware authors to hinder reverse engineering.

ASteganography

Steganography hides data inside other media files such as images or audio, not within source code logic to confuse analysts.

BCode encoding

Code encoding converts code to a specific format (such as Base64) but is a subset technique often used within obfuscation, not the overarching method described.

CObfuscationCorrect

Obfuscation transforms code using techniques such as variable renaming, dead code insertion, control flow alteration, and string encoding to make the logic extremely difficult for analysts to follow. Unlike encryption, obfuscated code remains executable by the browser or runtime engine. This technique is widely used in malicious JavaScript to extend the time needed for analysis and evade signature-based detection.

DEncryption

Encryption renders data completely unreadable without a key, and encrypted code cannot be directly executed by a browser, making it impractical as the sole technique for deployed malicious scripts.

Concept tested: JavaScript obfuscation technique for malware evasion

Source: https://owasp.org/www-community/attacks/Obfuscated_Code

Topics

#obfuscation#JavaScript evasion#code hiding#malware analysis

Community Discussion

No community discussion yet for this question.

Full 312-50V10 Practice