QuestionQ68

Threat Intelligence Analysis

Which technique is used to calculate the hash value of given binary code, both to uniquely identify malware and to periodically check for changes to the binary during analysis?

  • A Strings search
  • B File fingerprinting
  • C Local and online malware scanning
  • D Malware disassembly
Explanation

File fingerprinting computes a cryptographic hash of a binary. The resulting hash acts as an identifier for that exact file and can be recalculated later to detect any modification.

Community Discussion

No comments yet. Be the first to start the discussion!