A Primer on Reverse Engineering Malwares
A Primer on Reverse Engineering Malwares
A Primer on Reverse Engineering Malwares
You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
Behavior Analysis<br />
M<strong>on</strong>itoring<br />
Process M<strong>on</strong>itor records API calls it observes <strong>on</strong> the<br />
system that deal with file system and registry access. It<br />
shows the details of how programs create, delete, read or<br />
modify the local envir<strong>on</strong>ment<br />
Process M<strong>on</strong>itor’s log is very comprehensive.<br />
However, it is also very noisy<br />
Attempts by malware specimen to create pas.txt file and to<br />
locate the msnsettings.dat file � screenshot<br />
Behaviour Analysis Source - http://zeltser.com<br />
© 2011 KPMG, an Indian Partnership and a member firm of the KPMG network of independent member firms affiliated<br />
with KPMG Internati<strong>on</strong>al Cooperative (“KPMG Internati<strong>on</strong>al”), a Swiss entity. All rights reserved.
Change language