Malware Analysis — Summer 2025

Define malware and list its common types.

Compare worms and trojans with examples.

Evaluate the evolution of malware and discuss how malware threats have adapted over time.

Explain the concept of a logic bomb.

What is the difference between static and dynamic malware analysis?

Justify the importance of understanding OS security concepts for malware analysis.

Create a step-by-step guide for performing static analysis on an unknown executable.

Describe any two anti-static analysis techniques.

Explain the structure of a virtual machine used in malware analysis.

What are the common malware threats that exist today? Give a short description of each

Define obfuscation and explain its role in malware.

Explain how anti-static analysis techniques like packing and obfuscation hinder analysis.

What are Ccode constructs commonly found in disassembled malware?

Define breakpoints and their role in OllyDbg.

Describe how Wireshark can be used in analyzing network activity of malware.

Define file-less malware and explain its execution mechanism. Page 1 of

What are system calls and why are they important in dynamic analysis?

How can debuggers be used to unpack malware from memory?

Explain the use of memory forensics in identifying and analyzing advanced malware

Define metamorphic malware.

Compare signature-based and non-signature-based detection methods.

What is app sandboxing and how does it protect Android systems?

What is code injection?

Analyze the behavior of DroidKungFu malware.

Explain smartphone app permissions and how misuse leads to malware infections. Page 2 of