nerdexam
GIAC

GREM · Question #30

When analyzing a Windows executable, which of the following indicators most strongly suggests that the file is packed?

The correct answer is A. The file has a high entropy value. See the full explanation below for the reasoning.

Question

When analyzing a Windows executable, which of the following indicators most strongly suggests that the file is packed?

Options

  • AThe file has a high entropy value.
  • BThe file contains numerous readable strings.
  • CThe file size is unusually large for its functionality.
  • DThe executable has multiple sections named with standard names (e.g., .text, .data).

How the community answered

(54 responses)
  • A
    70% (38)
  • B
    7% (4)
  • C
    4% (2)
  • D
    19% (10)

Community Discussion

No community discussion yet for this question.

Full GREM Practice