GIAC
GREM · Question #30
When analyzing a Windows executable, which of the following indicators most strongly suggests that the file is packed?
The correct answer is A. The file has a high entropy value. See the full explanation below for the reasoning.
Question
When analyzing a Windows executable, which of the following indicators most strongly suggests that the file is packed?
Options
- AThe file has a high entropy value.
- BThe file contains numerous readable strings.
- CThe file size is unusually large for its functionality.
- DThe executable has multiple sections named with standard names (e.g., .text, .data).
How the community answered
(54 responses)- A70% (38)
- B7% (4)
- C4% (2)
- D19% (10)
Community Discussion
No community discussion yet for this question.