Malware analysis basics in Cybersecurity - Practice Problems & Coding Challenges

Challenge - 5 Problems

🧠 Conceptual

intermediate

Understanding Malware Behavior

Which of the following best describes the primary goal of dynamic malware analysis?

A To identify the malware's file size and creation date

B To examine the malware's source code without running it

C To observe how malware behaves when executed in a controlled environment

D To delete malware files from an infected system

💡 Hint

Think about what happens when you run a program to see what it does.

Dynamic analysis involves running malware in a safe environment to watch its actions, such as network connections or file changes. This helps understand its behavior.

📋 Factual

intermediate

Malware Types Identification

Which type of malware is designed to replicate itself and spread to other computers without user intervention?

A Worm

B Ransomware

C Spyware

D Trojan horse

💡 Hint

Consider malware that spreads automatically over networks.

Worms are self-replicating malware that spread independently across networks, unlike Trojans which require user action.

🔍 Analysis

advanced

Interpreting Malware Code Snippet

Given this simplified malware code snippet, what is its likely purpose?

open('secret.txt', 'w').write('Hacked!')

Cybersecurity

open('secret.txt', 'w').write('Hacked!')

A It deletes the file 'secret.txt' from the system

B It reads the contents of 'secret.txt' and prints it

C It encrypts the file 'secret.txt' to prevent access

D It creates or overwrites 'secret.txt' with the text 'Hacked!'

💡 Hint

Think about what the 'w' mode does when opening a file.

The code opens 'secret.txt' for writing, which creates the file if it doesn't exist or overwrites it if it does, then writes 'Hacked!'.

❓ Reasoning

advanced

Detecting Malware Using Signatures

Why might signature-based antivirus software fail to detect new malware variants?

A Because new malware often changes its code to avoid matching known signatures

B Because signature-based software only scans email attachments

C Because new malware is always harmless and does not need detection

D Because signature-based software only works on Windows systems

💡 Hint

Think about how malware tries to avoid being recognized.

Signature-based detection relies on known patterns. Malware authors often modify code to evade these patterns, making detection harder.

❓ Comparison

expert

Static vs Dynamic Malware Analysis

Which statement correctly compares static and dynamic malware analysis?

A Static analysis only works on encrypted malware; dynamic analysis only works on unencrypted malware

B Static analysis examines code without running it; dynamic analysis runs malware to observe behavior

C Both static and dynamic analysis require running malware on the internet

D Static analysis runs the malware to observe behavior; dynamic analysis examines code without execution

💡 Hint

Consider whether the malware is executed or just inspected.

Static analysis looks at the malware's code or files without running it, while dynamic analysis involves executing the malware to see what it does.