# Static Analysis

> Master static malware analysis. Learn to extract strings, analyze PE headers, calculate entropy, and identify packers without executing the code.

Canonical: https://codelivly.com/rooms/static-analysis
Last updated: 2026-09-16

| | |
|---|---|
| Level | Intermediate |
| Category | Forensics |
| Lessons | 4 |
| Estimated time | 30 min |
| XP | 100 |

This module dives deep into static malware analysis, the art of examining malicious code without executing it. You will learn how to safely extract hidden strings, analyze Portable Executable (PE) headers for anomalies, calculate file entropy to detect packing or encryption, and use tools like PE-bear, DIE (Detect It Easy), and strings. By mastering these foundational techniques, you will be able to quickly triage suspicious files, identify obfuscation techniques, and extract critical Indicators of Compromise (IOCs) while maintaining absolute safety.

## Lessons

1. What Is Static Analysis and Why Does It Matter (30 min)
2. File Hashing and Reputation Checks (VirusTotal) (30 min)
3. Examining PE Headers & Strings (30 min)
4. Guided Lab: Static Analysis of a Suspicious Binary (30 min)

## Related

- [Learning path: Malware Analysis Fundamentals](https://codelivly.com/learning-paths/malware-analysis-fundamentals)
- [All rooms](https://codelivly.com/rooms)