Malware analysis basics in Cybersecurity - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is malware?

Malware is software designed to harm, exploit, or damage computers and networks without the user's consent.

beginner

Name two main types of malware analysis.

The two main types are static analysis, which examines the code without running it, and dynamic analysis, which observes the malware behavior while it runs.

beginner

Why is a sandbox environment used in malware analysis?

A sandbox is a safe, isolated space where malware can be run and studied without risking harm to real systems.

beginner

What is the goal of malware analysis?

The goal is to understand how malware works, what damage it can cause, and how to detect or remove it.

beginner

What is a signature in malware detection?

A signature is a unique pattern or code snippet that helps identify a specific malware.

Which type of malware analysis involves running the malware to observe its behavior?

A Static analysis

B Network analysis

C Dynamic analysis

D Signature analysis

Dynamic analysis runs the malware in a controlled environment to see what it does.

What is the main purpose of using a sandbox in malware analysis?

A To speed up the malware

B To delete malware automatically

C To encrypt malware

D To safely observe malware behavior

A sandbox isolates malware so it can be studied without risk to real systems.

Which of the following is NOT a type of malware?

A Firewall

B Worm

C Virus

D Trojan

A firewall is a security tool, not malware.

What does a malware signature help with?

A Encrypting files

B Identifying malware

C Running malware faster

D Backing up data

Signatures are unique patterns used to detect specific malware.

Static analysis means:

A Examining malware code without running it

B Running malware in a sandbox

C Deleting malware automatically

D Monitoring network traffic

Static analysis studies the malware's code without executing it.

Explain the difference between static and dynamic malware analysis.

Think about whether the malware is running or not during analysis.

Describe why malware analysts use sandbox environments.

Consider safety and control when running dangerous software.