Questions tagged [malware-analysis]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
1
vote
0answers
68 views

Pixel File Size in STAMINA [closed]

Last year Intel released a white paper on a joint research effort with Microsoft concerning the possibility to perform malware analysis by converting a file to an image and then applying a deep neural ...
0
votes
1answer
44 views

Malware dropper uses "^" character in syntax of cmd.exe before calling mshta.exe to download file?

I found a malicious Excel file that was using an embedded HTA program as its dropper to download a powershell program from a malicious IP. The dropper was on a hidden sheet in the file. After ...
0
votes
0answers
4 views

What precaution to take when opening malware file using python script [migrated]

I'm writing a Python script to check the file hash of a malware sample against the VirusTotal database. At the moment, I'm using a build in open and read functions provided in a standard python ...
0
votes
0answers
62 views

OCSP hosts. How to tell Malicious OCSP hosts apart

Learning abit about allowed OCSP hosts on Windows 10: I've picked up OCSP requests carried out by CryptSvc pointing towards an OCSP server in Japan. Referring to Microsoft's Win10 Non-enterprise ...
0
votes
0answers
56 views

What does it mean to find a Imphash match?

I have Import Hash (Imphash) matches for some executables and dlls in my environment like teams update.exe, outlook.exe and other microsoft provided dlls apart from non-microsoft dlls too. When I take ...
0
votes
0answers
125 views

Security of Third Party Plugins in Thunderbird

In Thunderbird (a popular open source email client), there is an extension store similar to Mozilla Firefox which adds further functionality to the client. Mozilla has an article detailing the ...