312-50V10 · Question #745
Analyst is investigating proxy logs and found out that one of the internal user visited website storing suspicious java scripts. After opening one of them, he noticed that it is very hard to understan
The correct answer is C. Obfuscation. Obfuscation is the technique of deliberately making source code difficult to read and analyze while preserving its functionality, commonly used by malware authors to hinder reverse engineering.
Question
Analyst is investigating proxy logs and found out that one of the internal user visited website storing suspicious java scripts. After opening one of them, he noticed that it is very hard to understand the code and that all codes differ from the typical java script. What is the name of this technique to hide the code and extend analysis time?
Options
- ASteganography
- BCode encoding
- CObfuscation
- DEncryption
How the community answered
(20 responses)- B5% (1)
- C95% (19)
Why each option
Obfuscation is the technique of deliberately making source code difficult to read and analyze while preserving its functionality, commonly used by malware authors to hinder reverse engineering.
Steganography hides data inside other media files such as images or audio, not within source code logic to confuse analysts.
Code encoding converts code to a specific format (such as Base64) but is a subset technique often used within obfuscation, not the overarching method described.
Obfuscation transforms code using techniques such as variable renaming, dead code insertion, control flow alteration, and string encoding to make the logic extremely difficult for analysts to follow. Unlike encryption, obfuscated code remains executable by the browser or runtime engine. This technique is widely used in malicious JavaScript to extend the time needed for analysis and evade signature-based detection.
Encryption renders data completely unreadable without a key, and encrypted code cannot be directly executed by a browser, making it impractical as the sole technique for deployed malicious scripts.
Concept tested: JavaScript obfuscation technique for malware evasion
Source: https://owasp.org/www-community/attacks/Obfuscated_Code
Topics
Community Discussion
No community discussion yet for this question.