Question

Describe the differences between malware analysis methods – Static vs Dynamic

▪

Answer 1

Malware Programs are tose that lead the computer to behave abnormally and are responsible for malicious behaviour in any system.

Malware Analysis refers to the techniques or tools used to identify the malware characterstics and it,s area of impact and origin.

Malware Analysis can be divided into static and dynamic malware analysis.

In Static Malware Analysis the malware code is not actually run but only it's signs are studied to determine the impact of the malware and often requires more effort and knowledge because lesser tools can be used when there is no actual running of the malware code.

Example- The Malware Binary code is converted into proper undestandable instructions or piece of code . Then it becomes clear to the analyst what the malware is programmed to do.

Dynamic Malware Analysis on the other hand determines the actions and location of the malware by actually running the malware but the system safety is kept in mind. The malware is run in a controlled environment (such as system setup in closed and isolated virtual environment) so the malware does not affect the system while the analysis is going on. It can be performed using tools and is easier to implement but trading it off for system safety.