answers

Problem 4 - dynamic analysis (45 pts): Perform basic dynamic analysis on the malware of Problem 2 (Assignment1-2.malware) and then answer the following questions: 1. What happens when you run this malware? Is it what you expected and why? 2. Name a procmon filter and why you used it. 3. Are there any host-based signatures? (Files, registry keys, processes or services, etc). If so, what are they? 4. Are there any network-based signatures? (URLs, packet contents. etc) If so, what are they? 5. Is there anything that impeded your analysis? How so? How might you overcome this? 6. What do you think is the purpose of this malware