Publication

You receive an unknown Windows PE file. What's your very first step? 1. Inspect the PE Header 2. Perform Static Analysis 3. Examine Strings and Imports 4. Execute it in a controlled Sandbox 5. Analyze Assembly and Runtime Behavior Where do you start, and more importantly, WHY?

Let's hear from the researchers. #ReverseEngineering #MalwareAnalysis #Infosec