🇬🇧 Dissecting and Comparing different Binaries to Malware Analysis Filipi Pires

Analysis Foundations

Filipi Pires argues malware analysts must understand core concepts behind debuggers and disassemblers. He defines threats per ISO standards and stresses that samples—code, applications, or binaries—are the starting artifact whose maliciousness must be determined.

Static Versus Dynamic Analysis

After identifying malware versus benign files or maldocs, analysts choose static statistical analysis or dynamic execution analysis. Reverse engineering techniques support both approaches.

Documentation for Defense

Pires recommends recording every analysis step to capture attacker techniques, support reporting to management, enable conference talks, and improve defenses by revealing which security controls were bypassed.

Threat Intelligence Value

Structured findings feed cyber threat intelligence and resilience programs. Static binary review helps threat hunters understand how attackers use binaries to explore environments and which libraries or functions appear in malicious samples.