Analyze the screenshot below. Which event described below is taking place in the output shown?

The correct answer is A. Virtual machine detection. The screenshot depicts the use of virtual machine detection using the tool scoopyng. The tool does not offer VM escape features, and does not attempt to overflow memory. It performs tests on the environment to determine whether it is running in a VM environment.

Malware Analysis & Advanced Persistent Threats

Question

Exhibit

Options

AVirtual machine detection
BVirtual machine escape
CVirtual machine memory overflow
DVirtual disk isolation

How the community answered

(52 responses)

A
75% (39)
B
15% (8)
C
4% (2)
D
6% (3)

Explanation

The screenshot depicts the use of virtual machine detection using the tool scoopyng. The tool does not offer VM escape features, and does not attempt to overflow memory. It performs tests on the environment to determine whether it is running in a VM environment.

Topics

#VM detection#sandbox evasion#anti-analysis#malware behavior

Community Discussion

No community discussion yet for this question.

Full GCIH Practice