0

I'm just getting started with the book 'Practical Malware Analysis', some of the exercises are using PEview and Dependency Walker however I'm slightly allergic to using Windows.

Is it possible to analyze windows malware on linux without using VM's or does this require using Windows?

5
  • 1
    It all depends on the type of analysis that you want to perform.
    – schroeder
    Aug 7, 2019 at 12:03
  • @schroeder I would be wanting this to be static and dynamic so i assume I may need to use windows
    – c9i3j
    Aug 8, 2019 at 0:10
  • 1
    Sandboxes sound like the tool you are looking for
    – schroeder
    Aug 8, 2019 at 6:54
  • Yes but that would involve running windows in a VM right? I wanted to avoid windows at all cost
    – c9i3j
    Aug 9, 2019 at 22:38
  • 1
    No. Please look up malware sandbox options.
    – schroeder
    Aug 10, 2019 at 6:42

1 Answer 1

0

It is possible to analyze windows malware on linux - but you'll be limited when it comes to analyzing runtime behaviour. wine is good, but to observe the behaviour of the malware, you'll need a debugging vm with windows.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.