, EEL4806 Final Exam Review – Florida International
University – 2025 – Malware, Reverse Engineering,
Network Security, Protocol Analysis, and Social
Engineering (Chapters 8–14, Q&A Format).
In a botnet, what are the systems that tell individual bots what to do called?
C2 servers
What is the primary difference between a worm and a virus?
A worm can self‐propagate.
What is one advantage of static analysis over dynamic analysis of malware?
Static analysis limits your exposure to infection.
What would you use VirusTotal for?
Identifying malware against antivirus engines
What are two sections you would commonly find in a portable executable file?
Text and data
What could you use to generate your own malware?
Metasploit
What is the purpose of a packer for malware?
To obscure the actual program
What is the primary purpose of polymorphic code for malware programs?
Antivirus evasion
What would be one reason not to write malware in Python?
The Python interpreter may not be available.
What would you use Cuckoo Sandbox for?
Dynamic analysis of malware
If you wanted a tool that could help with both static and dynamic analysis of malware, which would
you choose?
IDA
What is the purpose of using a disassembler?
University – 2025 – Malware, Reverse Engineering,
Network Security, Protocol Analysis, and Social
Engineering (Chapters 8–14, Q&A Format).
In a botnet, what are the systems that tell individual bots what to do called?
C2 servers
What is the primary difference between a worm and a virus?
A worm can self‐propagate.
What is one advantage of static analysis over dynamic analysis of malware?
Static analysis limits your exposure to infection.
What would you use VirusTotal for?
Identifying malware against antivirus engines
What are two sections you would commonly find in a portable executable file?
Text and data
What could you use to generate your own malware?
Metasploit
What is the purpose of a packer for malware?
To obscure the actual program
What is the primary purpose of polymorphic code for malware programs?
Antivirus evasion
What would be one reason not to write malware in Python?
The Python interpreter may not be available.
What would you use Cuckoo Sandbox for?
Dynamic analysis of malware
If you wanted a tool that could help with both static and dynamic analysis of malware, which would
you choose?
IDA
What is the purpose of using a disassembler?
