Niall McLaughlin
CSC3059: Malware Analysis
CSC3059
Malware Analysis
Practical Exam Information
• 1pm Monday 28th February 2022
• 1 hour long + 15 mins extra for document upload
• (Students with ISSAs will receive extra time based on the 1 hour)
• Worth 60% of the module marks
• Online THA
• Open book – use notes + MSDN
• Taken at home
• Does not require access to lab machines / virtual machines
• Based on material from weeks 1-5 and practical lessons
Practical Exam Information
• What should your report contain
• Detailed report on the functionality of the code
• Analyse the assembly line by line
• Analyse the code’s behaviour at any code constructs e.g. if statements,
for loops, while loops, switch statements etc
• Use MSDN to analyse the behaviour of any windows API calls
• Understand the overall functionality of the code
Practical Exam Information
• How to prepare
• Understand the material covered in weeks 1-5
• Exam will be similar in style to practical 4
• Look at the mock practical exam
-> (directly based on Practical 4 Part 3 – read the solution)
• Do the practical lessons
• watch video solution and read written solutions
• The written solutions to practical lessons are similar to the style of
answer expected in the practical exam
• Make sure you can read and understand assembly
• Read the answers to practical 4