I'm just getting started with the book 'Practical Malware Analysis', some of the exercises are using PEview and Dependency Walker however I'm slightly allergic to using Windows.

Is it possible to analyze windows malware on linux without using VM's or does this require using Windows?

  • 1
    It all depends on the type of analysis that you want to perform. – schroeder Aug 7 '19 at 12:03
  • @schroeder I would be wanting this to be static and dynamic so i assume I may need to use windows – c9i3j Aug 8 '19 at 0:10
  • 1
    Sandboxes sound like the tool you are looking for – schroeder Aug 8 '19 at 6:54
  • Yes but that would involve running windows in a VM right? I wanted to avoid windows at all cost – c9i3j Aug 9 '19 at 22:38
  • 1
    No. Please look up malware sandbox options. – schroeder Aug 10 '19 at 6:42

It is possible to analyze windows malware on linux - but you'll be limited when it comes to analyzing runtime behaviour. wine is good, but to observe the behaviour of the malware, you'll need a debugging vm with windows.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.