0

I'm just getting started with the book 'Practical Malware Analysis', some of the exercises are using PEview and Dependency Walker however I'm slightly allergic to using Windows.

Is it possible to analyze windows malware on linux without using VM's or does this require using Windows?

Improve this question
5
  • 1
    It all depends on the type of analysis that you want to perform.
    – schroeder ♦
    Commented Aug 7, 2019 at 12:03
  • @schroeder I would be wanting this to be static and dynamic so i assume I may need to use windows
    – c9i3j
    Commented Aug 8, 2019 at 0:10
  • 1
    Sandboxes sound like the tool you are looking for
    – schroeder ♦
    Commented Aug 8, 2019 at 6:54
  • Yes but that would involve running windows in a VM right? I wanted to avoid windows at all cost
    – c9i3j
    Commented Aug 9, 2019 at 22:38
  • 1
    No. Please look up malware sandbox options.
    – schroeder ♦
    Commented Aug 10, 2019 at 6:42

1 Answer 1

Reset to default
0

It is possible to analyze windows malware on linux - but you'll be limited when it comes to analyzing runtime behaviour. wine is good, but to observe the behaviour of the malware, you'll need a debugging vm with windows.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .