GIAC
GREM · Question #130
What would an analyst be looking for when examining the import address table (IAT) of a Windows PE file during malware analysis?
The correct answer is B. The list of DLLs and functions that the executable will use. See the full explanation below for the reasoning.
Question
What would an analyst be looking for when examining the import address table (IAT) of a Windows PE file during malware analysis?
Options
- ADebugging information
- BThe list of DLLs and functions that the executable will use
- CMetadata regarding the file's original creation date
- DThe checksum of the file for integrity verification
How the community answered
(39 responses)- A13% (5)
- B74% (29)
- C5% (2)
- D8% (3)
Community Discussion
No community discussion yet for this question.