nerdexam
GIAC

GREM · Question #71

Which of the following is a sign that a malware sample is packed?

The correct answer is B. The binary contains large amounts of unreadable content in its PE sections. See the full explanation below for the reasoning.

Question

Which of the following is a sign that a malware sample is packed?

Options

  • AThe binary size is unusually small.
  • BThe binary contains large amounts of unreadable content in its PE sections.
  • CThe sample immediately executes its main payload.
  • DThe sample generates extensive network traffic upon execution.

How the community answered

(38 responses)
  • A
    5% (2)
  • B
    82% (31)
  • C
    3% (1)
  • D
    11% (4)

Community Discussion

No community discussion yet for this question.

Full GREM Practice