GIAC
GREM · Question #71
Which of the following is a sign that a malware sample is packed?
The correct answer is B. The binary contains large amounts of unreadable content in its PE sections. See the full explanation below for the reasoning.
Question
Which of the following is a sign that a malware sample is packed?
Options
- AThe binary size is unusually small.
- BThe binary contains large amounts of unreadable content in its PE sections.
- CThe sample immediately executes its main payload.
- DThe sample generates extensive network traffic upon execution.
How the community answered
(38 responses)- A5% (2)
- B82% (31)
- C3% (1)
- D11% (4)
Community Discussion
No community discussion yet for this question.