GIAC
GREM · Question #178
You see a PE section with very high entropy and no readable strings. What is the MOST likely condition?
The correct answer is B. Packed payload. See the full explanation below for the reasoning.
Question
You see a PE section with very high entropy and no readable strings. What is the MOST likely condition?
Options
- ADLL sideloading
- BPacked payload
- CSystem misconfiguration
- DDebug symbols stripped
How the community answered
(34 responses)- A6% (2)
- B79% (27)
- C3% (1)
- D12% (4)
Community Discussion
No community discussion yet for this question.