Tie-In to Lab 1
- Lab 1 walks this exact pipeline on a real sample.
- You will: fingerprint it, decide if it is packed, pull strings (plain + FLOSS), enumerate imports, and open it in Ghidra.
- Deliverable includes IOCs and a working YARA rule you author from your own static findings.
- Remember OPSEC: hash-lookup before you ever upload a file.
Key Takeaway
Static analysis is a repeatable checklist. Practice it in Lab 1 until it is muscle memory.