GIAC
GREM · Question #120
During static analysis of a suspicious executable, you notice it imports only LoadLibraryA and GetProcAddress. What is the MOST likely reason?
The correct answer is B. Dynamic API resolution. See the full explanation below for the reasoning.
Question
During static analysis of a suspicious executable, you notice it imports only LoadLibraryA and GetProcAddress. What is the MOST likely reason?
Options
- AStatic linking
- BDynamic API resolution
- CBinary corruption
- DAnti-VM behavior
How the community answered
(29 responses)- A7% (2)
- B76% (22)
- C14% (4)
- D3% (1)
Community Discussion
No community discussion yet for this question.