Книга: Practical Malware Analysis: The Hands-On Guide to Dissecting Malicious Software

Назад: Conclusion

Дальше: 7. Analyzing Malicious Windows Programs

’s `main` method. What is the new function called from `main`?
and ?
Q:
2. What new code construct has been added to `main`?
Q:
3. What is the difference between this lab’s parse HTML function and those of the previous labs?
Q:
4. How long will this program run? (Assume that it is connected to the Internet.)
Q:
5. Are there any new network-based indicators for this malware?
Q:
6. What is the purpose of this malware?

Назад: Conclusion

Дальше: 7. Analyzing Malicious Windows Programs