Malware is harmful software that acts against the requirements of computer users. There are many types including viruses, worms, Trojans, spyware, and ransomware. Malware analysis is the process of understanding how malware functions and its potential impact. It involves scanning malware with automated tools, analyzing static properties like file hashes, observing interactive behavior in an isolated lab, and manually reversing code to understand capabilities and logic.

1. What is Malware?
Malware, short for malicious software. It is an umbrella term used to refer to a variety of forms
of harmful or intrusive software that can take the form of executable code, scripts, active
content, and other software which is acting against the requirements of the computer user to
harm it.
Types of Malware: Anti-malware strategies:
What is malware analysis?
Malware analysis is the process of learning how malware functions, Abilities, and any potential
repercussions of a given malware. Malware code can differ radically, and it's essential to know
that malware can have many functionalities.
STAGES OF MALWARE ANALYSIS:
computer
viruses
ransom-
ware
worms spyware
Trojan
horses
scareware
ransmwareadware
Website
security scans
Using Anti-virus and
anti-malware software
"Air gap" isolation of Infected
Computers.
•Scan it with fully-automated tools. The fully-automated analysis does not provide as much information as an
analyst.
Fully-automated analysis
•To get a more in depth look at malware, to look at its static properties. The static properties include hashes,
embedded strings, embedded resources, and header information.
Static properties analysis
•To observe a malicious file, it might often times be put in an isolated laboratory to see if it directly infects the
laboratory.
Interactive behavior analysis
•Reversing the code of the malicious file can decode encrypted data that was stored by the sample, determine
the logic of the file’s domain, and see other capabilities
Manual code reversing