Which type of analysis involves executing malware code to observe its interactions with the host and resultant impact on the system?

Which type of analysis involves executing malware code to observe its interactions with the host and resultant impact on the system?

• A. Static Malware Analysis
• B. HashMyFiles
• C. Dynamic Malware Analysis
• D. Registry/configuration tools

Answer: (C)

Dynamic malware analysis involves running the malware in a controlled environment to observe what it does as it executes. This approach reveals runtime interactions with the host, such as file and registry changes, process creation, network activity, and memory behavior, which show the actual impact on the system. Static analysis, by contrast, examines the code without executing it, so it can reveal structure, strings, and potential indicators but not what the program does when it runs. A hashing tool only computes file hashes for integrity checks, not behavior, and registry/configuration tools focus on inspecting or editing settings rather than analyzing malware behavior.

Dynamic malware analysis involves running the malware in a controlled environment to observe what it does as it executes. This approach reveals runtime interactions with the host, such as file and registry changes, process creation, network activity, and memory behavior, which show the actual impact on the system. Static analysis, by contrast, examines the code without executing it, so it can reveal structure, strings, and potential indicators but not what the program does when it runs. A hashing tool only computes file hashes for integrity checks, not behavior, and registry/configuration tools focus on inspecting or editing settings rather than analyzing malware behavior.