Which security evasion tool is designed to conceal the existence of malware and resist reverse engineering?

Which security evasion tool is designed to conceal the existence of malware and resist reverse engineering?

• A. Obfuscator
• B. Packer
• C. Crypter
• D. Downloader

Answer: (C)

Concealing malware and making reverse engineering harder relies on transforming the payload so analysts can’t easily see what the program will do, often by decrypting or decoding the malicious code only at runtime. The tool that fits this purpose best uses encryption to hide the actual payload and includes a decryptor that runs in memory, making static analysis see only encrypted data and a small stub. This approach directly aims to obscure the existence of the real malware and complicate reverse engineering. Other options may obfuscate code to hinder reading or compress the payload to evade simple scans, but they aren’t primarily about hiding the malware’s presence or resisting in-depth analysis in the same focused way. A downloader simply fetches additional payloads and doesn’t inherently hide the malware.

Concealing malware and making reverse engineering harder relies on transforming the payload so analysts can’t easily see what the program will do, often by decrypting or decoding the malicious code only at runtime. The tool that fits this purpose best uses encryption to hide the actual payload and includes a decryptor that runs in memory, making static analysis see only encrypted data and a small stub. This approach directly aims to obscure the existence of the real malware and complicate reverse engineering.

Other options may obfuscate code to hinder reading or compress the payload to evade simple scans, but they aren’t primarily about hiding the malware’s presence or resisting in-depth analysis in the same focused way. A downloader simply fetches additional payloads and doesn’t inherently hide the malware.