Free Preparation Discussions
MENU
EC-Council 112-57 Exam - Topic 12 Question 1 Discussion
Topic #: 12
Which of the following techniques is used to compute the hash value for a given binary code to uniquely identify malware or periodically verify changes made to the binary code during analysis?
File fingerprinting is the forensic technique of generating a cryptographic hash (such as MD5, SHA-1, SHA-256) for a file to create a unique, repeatable identifier for that exact byte sequence. In malware forensics, analysts compute hashes to (1) uniquely identify a suspicious binary across cases and tools, (2) confirm whether two samples are identical or different variants, and (3) verify integrity over time---for example, ensuring the sample did not change during copying, extraction, sandbox handling, or during an analysis workflow that might inadvertently modify the file (e.g., patching, unpacking outputs, or tool-side normalization). Re-hashing at different stages provides a defensible way to demonstrate that the analyzed artifact is the same as the acquired artifact, supporting evidentiary integrity and chain-of-custody principles commonly emphasized in digital forensics documentation.
The other techniques do not primarily serve this purpose. Strings search extracts readable text fragments but does not produce a unique integrity identifier. Local and online malware scanning uses signatures/reputation and may identify families, but it is not an integrity verification mechanism for the exact file bytes. Malware disassembly helps understand logic and instructions, not compute an identity hash. Therefore, the correct answer is File fingerprinting (A).
Joaquin
25 days agoRikki
1 month agoZoila
1 month agoLorean
1 month agoCarmen
2 months agoAlline
2 months agoKeneth
2 months agoJodi
2 months agoEdison
2 months agoAileen
2 months agoDianne
3 months agoGolda
3 months agoMartina
3 months agoAlaine
3 months agoTheodora
5 months agoKristine
5 months agoTheodora
5 months agoPage
5 months agoTammi
5 months agoSelma
5 months agoRonna
6 months agoSheridan
6 months agoGregoria
6 months agoTawna
6 months agoBrinda
6 months agoDominic
6 months ago