SAL2

TryHackMe Security Analyst Level 2 (SAL2)

Malware Behavior AnalysisEnglish
Exam overview

Practice session

A SOC analyst is performing static malware analysis on a suspicious PE file. Running 'strings' against the binary reveals: 'CreateRemoteThread', 'VirtualAllocEx', 'WriteProcessMemory', 'OpenProcess'. What malicious capability do these Windows API imports suggest?

Loading your practice session…