Search icon
Arrow left icon
All Products
Best Sellers
New Releases
Books
Videos
Audiobooks
Learning Hub
Newsletters
Free Learning
Arrow right icon
Cuckoo Malware Analysis

You're reading from  Cuckoo Malware Analysis

Product type Book
Published in Oct 2013
Publisher Packt
ISBN-13 9781782169239
Pages 142 pages
Edition 1st Edition
Languages

Submitting a binary file – Sality.G.exe


This section deals with binary files that contain malware samples. For this purpose, we may need to isolate the environment of the malware once again.

  1. Please repeat adding the Host-only Adapter vboxnet0 and set it just the way we did in Chapter 1, Getting Started with Automated Malware Analysis using Cuckoo Sandbox.

  2. Start the windows-cuckoo from VirtualBox, set the IP, and save the snapshot of it.

  3. Remember to turn it off, change the Cuckoo configuration, and restart it.

  4. You can start to analyze the binary file using the following command:

    $ python utils/submit.py --platform windows shares/Sality.G.exe
    
  5. Also remember that the .exe file was named as Sality.G.exe in order to warn the user that this file is a virus named Sality.G.exe. This file disguises itself as a keygen and activator for certain software.

  6. Please make sure you have a Success message as shown in the preceding screenshot with task with ID 50.

    Windows will open the binary file.

  7. We do not need...

lock icon The rest of the chapter is locked
Register for a free Packt account to unlock a world of extra content!
A free Packt account unlocks extra newsletters, articles, discounted offers, and much more. Start advancing your knowledge today.
Unlock this book and the full library FREE for 7 days
Get unlimited access to 7000+ expert-authored eBooks and videos courses covering every tech area you can think of
Renews at $15.99/month. Cancel anytime}