nerdexam
GIAC

GREM · Question #136

In analyzing an RTF file, what is the significance of encountering large blocks of obfuscated or encoded data?

The correct answer is A. It may indicate an attempt to hide malicious shellcode or payloads. See the full explanation below for the reasoning.

Question

In analyzing an RTF file, what is the significance of encountering large blocks of obfuscated or encoded data?

Options

  • AIt may indicate an attempt to hide malicious shellcode or payloads.
  • BIt is a common method for embedding legitimate images.
  • CIt signifies complex formatting not relevant to security analysis.
  • DIt typically denotes encrypted user data, not relevant for malware analysis.

How the community answered

(26 responses)
  • A
    73% (19)
  • B
    15% (4)
  • C
    8% (2)
  • D
    4% (1)

Community Discussion

No community discussion yet for this question.

Full GREM Practice