Malware Analysis Notes


https://infosecwriteups.com/malware-analysis-101-ac6d55092c8d

Static Analysis

  • Packed and obfuscated code will often include at least the functions LoadLibrary and GetProcAddress, which are used to load and gain access to additional functions.


Dynamic Analysis

Windows Legitimate Processes