What is the term for analyzing malware by inspecting the executable code without executing it?

What is the term for analyzing malware by inspecting the executable code without executing it?

• A. Static Malware Analysis
• B. Dynamic Malware Analysis
• C. Imaging tool
• D. File/data analysis

Answer: (A)

Static malware analysis is the process of examining the executable’s code and artifacts without running it. By inspecting the binary, you can read assembly or use disassembly/decompilation, look at strings, headers, import tables, and the control-flow structure to infer what the malware is designed to do. This approach is safer and faster because no dangerous payload is executed, and it helps reveal packing, obfuscation, and anti-analysis techniques. Dynamic malware analysis would involve running the sample in a controlled environment to observe its behavior, while imaging tool or generic file/data analysis terms don’t specifically describe examining code without execution.

Static malware analysis is the process of examining the executable’s code and artifacts without running it. By inspecting the binary, you can read assembly or use disassembly/decompilation, look at strings, headers, import tables, and the control-flow structure to infer what the malware is designed to do. This approach is safer and faster because no dangerous payload is executed, and it helps reveal packing, obfuscation, and anti-analysis techniques. Dynamic malware analysis would involve running the sample in a controlled environment to observe its behavior, while imaging tool or generic file/data analysis terms don’t specifically describe examining code without execution.