NEW350+ rooms now have a live terminal, so you can learn by typing the commands, right in your browser.Learn in a live terminal. 350+ rooms.Try a lab♥ Codelivly is 100% free, no paywall. If it helped you, chip in to keep it running.100% free. Help keep it so.Support us
[>_] ROOM · Forensics
Static Analysis
Master static malware analysis. Learn to extract strings, analyze PE headers, calculate entropy, and identify packers without executing the code.
Room tasks
1What Is Static Analysis and Why Does It Matter
2File Hashing and Reputation Checks (VirusTotal)
3Examining PE Headers & Strings
4Guided Lab: Static Analysis of a Suspicious Binary
Frequently Asked Questions
What is static malware analysis?
Static analysis inspects a file without executing it, using hashes, strings, headers, imports and entropy. It is safe and quick, and gives clues about the file's purpose and whether it is packed.
What does entropy tell you about a file?
Entropy measures randomness. Very high values in a section often suggest compression or encryption, which is a common sign of a packed or obfuscated executable.
Can static analysis alone identify malware?
It can reveal strong indicators, but obfuscation and packing can hide intent. Analysts usually combine it with dynamic analysis, as this free Codelivly room explains.