GIAC
GREM · Question #136
In analyzing an RTF file, what is the significance of encountering large blocks of obfuscated or encoded data?
The correct answer is A. It may indicate an attempt to hide malicious shellcode or payloads. See the full explanation below for the reasoning.
Question
In analyzing an RTF file, what is the significance of encountering large blocks of obfuscated or encoded data?
Options
- AIt may indicate an attempt to hide malicious shellcode or payloads.
- BIt is a common method for embedding legitimate images.
- CIt signifies complex formatting not relevant to security analysis.
- DIt typically denotes encrypted user data, not relevant for malware analysis.
How the community answered
(26 responses)- A73% (19)
- B15% (4)
- C8% (2)
- D4% (1)
Community Discussion
No community discussion yet for this question.