Книга: Practical Malware Analysis: The Hands-On Guide to Dissecting Malicious Software
Назад: Modifying Program Execution in Practice
Дальше: 9. OllyDbg

Debugging is a critical tool for obtaining information about a malicious program that would be difficult to obtain through disassembly alone. You can use a debugger to single-step through a program to see exactly what’s happening internally or to set breakpoints to get information about particular sections of code. You can also use a debugger to modify the execution of a program in order to gain additional information.

It takes practice to be able to analyze malware effectively with a debugger. The next two chapters cover the specifics of using the OllyDbg and WinDbg debuggers.

Назад: Modifying Program Execution in Practice
Дальше: 9. OllyDbg

sss
sss