Open navigation menu

Welcome to Scribd!

Malware Analysis Fundamentals - Files - Tools: March 26, 2020 Marc Ochsenmeier

Uploaded by

0% found this document useful (0 votes)

76 views14 pages

referring to mal analysis

Original Title

MAL ANALY

Copyright

© © All Rights Reserved

Available Formats

PDF, TXT or read online from Scribd

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Report this Document

referring to mal analysis

Copyright:

© All Rights Reserved

Available Formats

Download as PDF, TXT or read online from Scribd

Flag for inappropriate content

0% found this document useful (0 votes)

76 views14 pages

Malware Analysis Fundamentals - Files - Tools: March 26, 2020 Marc Ochsenmeier

Uploaded by

referring to mal analysis

Copyright:

© All Rights Reserved

Available Formats

Download as PDF, TXT or read online from Scribd

Flag for inappropriate content

Jump to Page

You are on page 1of 14

Search inside document

Malware Analysis Fundamentals - Files | Tools

March 26, 2020

Marc Ochsenmeier
@ochsenmeier
www.winitor.com
Malware Analysis Fundamentals - Files > Tools 2

Handling an unknown | generic File

Marc Ochsenmeier | @ochsenmeier | www.winitor.com March 26, 2020

Malware Analysis Fundamentals - Files > Tools 3

Handling an email File

Marc Ochsenmeier | @ochsenmeier | www.winitor.com March 26, 2020

Malware Analysis Fundamentals - Files > Tools 4

Handling a MS Office 97-2003 File

applies to following files: doc, xls, ppt, msg

Marc Ochsenmeier | @ochsenmeier | www.winitor.com March 26, 2020

Malware Analysis Fundamentals - Files > Tools 5

Handling a protected MS Office 97-2003 File

applies to following files: doc, xls, ppt, msg

Marc Ochsenmeier | @ochsenmeier | www.winitor.com March 26, 2020

Malware Analysis Fundamentals - Files > Tools 6

Handling a MS Office 2007+ File

applies to following files: docx, xlsx, xlsb, xlsm, pptx

Marc Ochsenmeier | @ochsenmeier | www.winitor.com March 26, 2020

Malware Analysis Fundamentals - Files > Tools 7

Handling a protected MS Office 2007+ File

applies to following files: docx, xlsx, xlsb, xlsm, pptx

Marc Ochsenmeier | @ochsenmeier | www.winitor.com March 26, 2020

Malware Analysis Fundamentals - Files > Tools 8

Handling an RTF File

Marc Ochsenmeier | @ochsenmeier | www.winitor.com March 26, 2020

Malware Analysis Fundamentals - Files > Tools 9

Handling an LNK File

Marc Ochsenmeier | @ochsenmeier | www.winitor.com March 26, 2020

Malware Analysis Fundamentals - Files > Tools 10

Handling an MSI File

Marc Ochsenmeier | @ochsenmeier | www.winitor.com March 26, 2020

Malware Analysis Fundamentals - Files > Tools 11

Handling a PDF file

Marc Ochsenmeier | @ochsenmeier | www.winitor.com March 26, 2020

Malware Analysis Fundamentals - Files > Tools 12

Handling an Executable File

Marc Ochsenmeier | @ochsenmeier | www.winitor.com March 26, 2020

Malware Analysis Fundamentals - Files > Tools 13

Handling a Certificate File

Marc Ochsenmeier | @ochsenmeier | www.winitor.com March 26, 2020

Malware Analysis Fundamentals - Files > Tools 14

More Information
• python-oletools
https://github.com/decalage2/oletools
• Didier Stevens
https://blog.didierstevens.com/didier-stevens-suite/
• Analyzing Malicious Documents Cheat Sheet
https://zeltser.com/media/docs/analyzing-malicious-document-files.pdf

Marc Ochsenmeier | @ochsenmeier | www.winitor.com March 26, 2020

You might also like

Malware Analysis Fundamentals Files Tools
Document13 pages
Malware Analysis Fundamentals Files Tools
apolelel
No ratings yet
F16-1488 Mashood Ali MicroSoft
Document42 pages
F16-1488 Mashood Ali MicroSoft
Alina Khan
No ratings yet
Analyzing Microsoft Office Documents
Document10 pages
Analyzing Microsoft Office Documents
The Hungry Quokka
No ratings yet
1
Document2 pages
1
cocailinday105
No ratings yet
Big Data for Beginners: Data at Scale. Harnessing the Potential of Big Data Analytics
From Everand
Big Data for Beginners: Data at Scale. Harnessing the Potential of Big Data Analytics
Tom Lesley
No ratings yet
Microsoft Access Guide to Success: From Fundamentals to Mastery in Crafting Databases, Optimizing Tasks, & Making Unparalleled Impressions [III EDITION]
From Everand
Microsoft Access Guide to Success: From Fundamentals to Mastery in Crafting Databases, Optimizing Tasks, & Making Unparalleled Impressions [III EDITION]
Kevin Pitch
Rating: 5 out of 5 stars
5/5 (8)
Big Data
Document27 pages
Big Data
DAN
No ratings yet
Pestudio
Document8 pages
Pestudio
Maram 0
No ratings yet
Analyzing MSOffice Malware With OfficeMalScanner
Document19 pages
Analyzing MSOffice Malware With OfficeMalScanner
@4e4en
No ratings yet
Submitted To:: Assignment On Decision Support System
Document5 pages
Submitted To:: Assignment On Decision Support System
Rafsana Rifat
No ratings yet
Mainsoft Eyed As Windows Source Code Leak - InternetNews
Document2 pages
Mainsoft Eyed As Windows Source Code Leak - InternetNews
Mariusz Pruszowski
No ratings yet
Cyber Security Thesis Proposal: October 2020
Document9 pages
Cyber Security Thesis Proposal: October 2020
Diemut Naknan
No ratings yet
Best Practices For Managing Data Breach Risk in Mongodb: Key Takeaway
Document3 pages
Best Practices For Managing Data Breach Risk in Mongodb: Key Takeaway
Angsuman Dutta
No ratings yet
PSS Learning Services: Lesson 4: Maintaining A Microsoft Project 2000 Installation 79
Document23 pages
PSS Learning Services: Lesson 4: Maintaining A Microsoft Project 2000 Installation 79
Elvis Rafaila
No ratings yet
Statement and Confirmation of Own Work: Student Declaration
Document4 pages
Statement and Confirmation of Own Work: Student Declaration
Tafadzwa Kapyola
No ratings yet
Introduction To Big Data: Types of Digital Data, History of Big Data Innovation
Document12 pages
Introduction To Big Data: Types of Digital Data, History of Big Data Innovation
Uma Tomar
No ratings yet
Assignment On Decision Management System: Submitted To
Document5 pages
Assignment On Decision Management System: Submitted To
Tanjum Tisha
No ratings yet
Running Head: IT-659-Q5209 Cyberlaw and Ethics 20TW5 1
Document6 pages
Running Head: IT-659-Q5209 Cyberlaw and Ethics 20TW5 1
Peter Kidiavai
No ratings yet
SANS Top-20 Internet Security Attack Targets (2006 Annual Update)
Document43 pages
SANS Top-20 Internet Security Attack Targets (2006 Annual Update)
Marcelo Machado
No ratings yet
Project Report: Objective
Document3 pages
Project Report: Objective
Siraj Anand
No ratings yet
Virus in Vista..
Document82 pages
Virus in Vista..
Nani Koduri
No ratings yet
BeyondTrust SEntDesktop SO23313-EGuide FINAL 9.25
Document14 pages
BeyondTrust SEntDesktop SO23313-EGuide FINAL 9.25
Damir Brezic
No ratings yet
Akshay Abrol Kishan Ramani: Presented by
Document10 pages
Akshay Abrol Kishan Ramani: Presented by
Piyush Bhut
No ratings yet
Big Data Answers
Document14 pages
Big Data Answers
Manan Sharma
No ratings yet
11a ReCap
Document97 pages
11a ReCap
Nguyet Vy Dao Nguyen
No ratings yet
The Software Industry: Economic Principles, Strategies, Perspectives
From Everand
The Software Industry: Economic Principles, Strategies, Perspectives
Peter Buxmann
No ratings yet
Manual Journal Entry Testing: Data Analytics and The Risk of Fraud
Document14 pages
Manual Journal Entry Testing: Data Analytics and The Risk of Fraud
Artho Kasih
No ratings yet
How Do I Create PDF Documents in Mac OS X
Document3 pages
How Do I Create PDF Documents in Mac OS X
Matt Redman
No ratings yet
BDA Class1
Document26 pages
BDA Class1
Celina Sawan
No ratings yet
Da Unit-2
Document23 pages
Da Unit-2
Shruthi Sayam
No ratings yet
Security Basic and IT
Document9 pages
Security Basic and IT
NextLevel Akhyar
No ratings yet
Lab Cisco 11.2.2.6
Document4 pages
Lab Cisco 11.2.2.6
Estiven Valencia
No ratings yet
01 - CO1-Module 1
Document158 pages
01 - CO1-Module 1
Woy
No ratings yet
Hakin9 05 2010 EN
Document50 pages
Hakin9 05 2010 EN
Nagakotesh
No ratings yet
Engineering Journal Big Data and Apache Spark: A Review
Document5 pages
Engineering Journal Big Data and Apache Spark: A Review
Engineering Journal
No ratings yet
International Journal of Data Mining Management Systems (IJDMS)
Document2 pages
International Journal of Data Mining Management Systems (IJDMS)
CS & IT
No ratings yet
International Journal of Data Mining Management Systems (IJDMS)
Document2 pages
International Journal of Data Mining Management Systems (IJDMS)
CS & IT
No ratings yet
International Journal of Data Mining Management Systems (IJDMS)
Document2 pages
International Journal of Data Mining Management Systems (IJDMS)
CS & IT
No ratings yet
International Journal of Data Mining Management Systems (IJDMS)
Document2 pages
International Journal of Data Mining Management Systems (IJDMS)
CS & IT
No ratings yet
International Journal of Data Mining Management Systems (IJDMS)
Document2 pages
International Journal of Data Mining Management Systems (IJDMS)
CS & IT
No ratings yet
Call For Papers: Data Mining Foundations Data Mining Applications Knowledge Processing
Document1 page
Call For Papers: Data Mining Foundations Data Mining Applications Knowledge Processing
CS & IT
No ratings yet
Uses of Data Mining Tools
Document5 pages
Uses of Data Mining Tools
berryklaus1
No ratings yet
PDF Application Security
Document5 pages
PDF Application Security
studydatadownload
No ratings yet
International Journal of Data Mining Management Systems (IJDMS)
Document2 pages
International Journal of Data Mining Management Systems (IJDMS)
CS & IT
No ratings yet
IJMSN
Document2 pages
IJMSN
CS & IT
No ratings yet
Laudon Mis16 PPT Ch08 KL CE
Document47 pages
Laudon Mis16 PPT Ch08 KL CE
Dr. Ketan Prajapati
No ratings yet
James Spooner - Secerno
Document14 pages
James Spooner - Secerno
Assaf Rappaport
No ratings yet
Cyber - Student
Document7 pages
Cyber - Student
Aaaja Re
No ratings yet
Mobile Malware Attacks and Defense
From Everand
Mobile Malware Attacks and Defense
Ken Dunham
Rating: 5 out of 5 stars
5/5 (1)
IJSEA
Document2 pages
IJSEA
CS & IT
No ratings yet
Big Data
Document2 pages
Big Data
RAHUL DUTTA
No ratings yet
Activity de Lab 1 4 5
Document7 pages
Activity de Lab 1 4 5
lulu126
No ratings yet
Project Security
Document3 pages
Project Security
Bui Dang Khoa
No ratings yet
International Journal of Data Mining Management Systems (IJDMS)
Document2 pages
International Journal of Data Mining Management Systems (IJDMS)
CS & IT
No ratings yet
How to Use Web 2.0 and Social Networking Sites Securely: A Pocket Guide
From Everand
How to Use Web 2.0 and Social Networking Sites Securely: A Pocket Guide
Alan Calder
No ratings yet
Third International Conference On Data Mininig and Database (DMDB 2016)
Document2 pages
Third International Conference On Data Mininig and Database (DMDB 2016)
CS & IT
No ratings yet
International Journal of Data Mining Management Systems (IJDMS)
Document2 pages
International Journal of Data Mining Management Systems (IJDMS)
CS & IT
No ratings yet
International Journal of Data Mining Management Systems (IJDMS)
Document2 pages
International Journal of Data Mining Management Systems (IJDMS)
CS & IT
No ratings yet
Access
Document12 pages
Access
api-360084022
No ratings yet
Microsoft Log Parser Toolkit: A Complete Toolkit for Microsoft's Undocumented Log Analysis Tool
From Everand
Microsoft Log Parser Toolkit: A Complete Toolkit for Microsoft's Undocumented Log Analysis Tool
Gabriele Giuseppini
Rating: 5 out of 5 stars
5/5 (1)
National Computer Education Accreditation Council Nceac: Institution University of Malakand
Document4 pages
National Computer Education Accreditation Council Nceac: Institution University of Malakand
Saadat Rehman
No ratings yet
Data Structures and Algorithms
Document3 pages
Data Structures and Algorithms
Saadat Rehman
No ratings yet
Lab Manual CS301
Document36 pages
Lab Manual CS301
Khan Bahi
No ratings yet
Disabling MS Advanced Threat Protection and Advanced Threat Analytics
Document76 pages
Disabling MS Advanced Threat Protection and Advanced Threat Analytics
Saadat Rehman
No ratings yet
Us 17
Document48 pages
Us 17
Saadat Rehman
No ratings yet
Open Source GSM
Document6 pages
Open Source GSM
Saadat Rehman
No ratings yet
Lecture 1&2
Document67 pages
Lecture 1&2
Saadat Rehman
No ratings yet
Report Final Dams
Document1 page
Report Final Dams
Saadat Rehman
No ratings yet
Cry 2
Document6 pages
Cry 2
Saadat Rehman
No ratings yet
12V Ups
Document2 pages
12V Ups
Saadat Rehman
No ratings yet
VNFDLMVFDNBKMDF V KSMJLVNKLSDJVNKSN jxzn4
Document1 page
VNFDLMVFDNBKMDF V KSMJLVNKLSDJVNKSN jxzn4
Saadat Rehman
No ratings yet
S2 Appendix: Details On Derivation of QSCR Magnetic and Electric Fields
Document2 pages
S2 Appendix: Details On Derivation of QSCR Magnetic and Electric Fields
Saadat Rehman
No ratings yet
OCT Noise Radiation
Document5 pages
OCT Noise Radiation
Saadat Rehman
No ratings yet
OCT Acoustic Noise Detection
Document5 pages
OCT Acoustic Noise Detection
Saadat Rehman
No ratings yet
Chapter 3
Document7 pages
Chapter 3
Pia Espanillo
No ratings yet
Forensic Readiness Checklist
Document2 pages
Forensic Readiness Checklist
damtek
100% (1)
Ddei 2.1 QSC 7100 v2
Document1 page
Ddei 2.1 QSC 7100 v2
DocUploader22
No ratings yet
Finding More Bridges For Tor - en
Document2 pages
Finding More Bridges For Tor - en
Hafis Muhammed
No ratings yet
Demystifying Networking Assignment-Week 3: Correct Answer: B) UDP
Document3 pages
Demystifying Networking Assignment-Week 3: Correct Answer: B) UDP
Mini Bhatt
No ratings yet
Salesforce Platform Pricing Editions
Document2 pages
Salesforce Platform Pricing Editions
Jull Quintero Daza
No ratings yet
Clothes Shop - Test Plan
Document15 pages
Clothes Shop - Test Plan
Khổng Hồng Anh
No ratings yet
Chapter 1 - Introduction
Document21 pages
Chapter 1 - Introduction
Gudata Gecho
No ratings yet
How To Hack Wi-Fi: Stealing Wi-Fi Passwords With An Evil Twin Attack Null Byte :: WonderHowTo
Document8 pages
How To Hack Wi-Fi: Stealing Wi-Fi Passwords With An Evil Twin Attack Null Byte :: WonderHowTo
warisz
No ratings yet
Visit:: Join Telegram To Get Instant Updates: Contact: MAIL: Instagram: Instagram: Whatsapp Share
Document54 pages
Visit:: Join Telegram To Get Instant Updates: Contact: MAIL: Instagram: Instagram: Whatsapp Share
bgbdbdf
No ratings yet
Discover Pro Gen.1&2 (MIB) : Map Material Update
Document5 pages
Discover Pro Gen.1&2 (MIB) : Map Material Update
Dmitry Gorbachev
No ratings yet
AZ-500 Syllabus
Document4 pages
AZ-500 Syllabus
manishraja4u
No ratings yet
Unit Iv: Mobile TCP and Wap
Document70 pages
Unit Iv: Mobile TCP and Wap
Iliyas Ahamed
No ratings yet
Machine - Config Web - Config
Document10 pages
Machine - Config Web - Config
Riya
No ratings yet
SSK4300 Individual Assignment
Document12 pages
SSK4300 Individual Assignment
ikhwan salihin
No ratings yet
API Security Testing
Document4 pages
API Security Testing
Abhijit Chatterjee
No ratings yet
Profile Ashok Kumar Sharma
Document2 pages
Profile Ashok Kumar Sharma
Vivek Sinha
No ratings yet
CIS Controls v8 Change Log Final
Document222 pages
CIS Controls v8 Change Log Final
Ah Chai
100% (1)
Marvell AVB Switch: 7-Port Unmanaged AVB Switch With Energy Efficient Ethernet
Document2 pages
Marvell AVB Switch: 7-Port Unmanaged AVB Switch With Energy Efficient Ethernet
Beyond Technology
No ratings yet
Internet Threats and Netiquette Lesson 2
Document45 pages
Internet Threats and Netiquette Lesson 2
Dave Carlo Mandap
No ratings yet
HSM Manager - User Guide v5.1.7
Document177 pages
HSM Manager - User Guide v5.1.7
lazaro
No ratings yet
Data Flow Diagram
Document8 pages
Data Flow Diagram
Cha Acueza
No ratings yet
What Is Trojan
Document23 pages
What Is Trojan
Nihal Raut
No ratings yet
SQL Server Performance Tuning
Document25 pages
SQL Server Performance Tuning
Bang Trinh
No ratings yet
Dark - Fail: Is A Darknet Site Online?
Document7 pages
Dark - Fail: Is A Darknet Site Online?
Sacculus Sacc
No ratings yet
DDIA in Concise
Document106 pages
DDIA in Concise
Watan Sahu
No ratings yet
The Difference Between Threat, Vulnerability, and Risk, and Why You Need To Know - Trava-Min
Document4 pages
The Difference Between Threat, Vulnerability, and Risk, and Why You Need To Know - Trava-Min
priyanka
No ratings yet
Pacs Analysis Corrections Tsr-195396 v1.0
Document6 pages
Pacs Analysis Corrections Tsr-195396 v1.0
Shaqif Hasan Sajib
No ratings yet
Analyser Download and Install v5 2020
Document11 pages
Analyser Download and Install v5 2020
Ponmanimaran P
No ratings yet
Wimax Poster
Document9 pages
Wimax Poster
Mukesh Sai
No ratings yet