Memory Analysis: It is collecting and analyzing memory artifacts to learn more about the malware.Dynamic Analysis: It is analyzing how the malware behave after running it in a sandbox.Static Analysis: It is collecting information about the malicious application without running it.In most cases, as a malware analyst you need to perform the following analysis techniques: The most basic technique is deploying some isolated virtual machines (Linux and Windows) or you can deploy some ready-to-use malware analysis sandboxes such as Cuckoo sandbox or FLARE VM. That is why you need to build your own malware analysis lab and sandbox. It is always a bad idea to testand analyze malware in production systems. When performing malware analysis, you ensure that you are testing in a dedicated and isolated environment. Malware analysis is the art of determining the functionality, origin, and potential impact of a given malicious software. Additionally, the content of the file being analysed is checked against several white and black lists and thresholds.In this series, we are going to learn how to perform malware analysis. Result is checked against the Microsoft specification. Pestudio implements a rich set of features that is especially designed to retrieve every single detail of any executable file. Since the file being analyzed is never started, you can inspect any unknown or malicious executable file and even ransomware without a risk of infection.

The tool uses a powerful parser and a flexible set of configuration files that are used to provide many of indicators and determine thresholds. The goal of pestudio is to spot these artifacts in order to ease and accelerate the Malware Initial Assessment. In doing so, it often leaves suspicious patterns, unexpected metadata, and sometimes even anomalies. Malicious software often attempts to hide its intents in order to evade early detection and static analysis.

Pestudio is a tool that is used in many Cyber Emergency Response Teams (CERT) worldwide in order to perform malware initial assessment.

What is pestudio