攻撃者のマシン I のダウンロード フォルダーにある実行可能ファイル ShadowByte.exe を分析し、ファイルのリンカー情報の値を特定します。(実践的な質問)
正解:B
Analyzing the executable file to determine the Linker Info value involves examining the file's properties. The Linker Info is part of the metadata within an executable file, often viewed using tools such as PE Explorer, CFF Explorer, or using command-line tools likedumpbinin Windows orreadelfin Unix-like systems. Here's a step-by-step approach: * Locate the file: Ensure thatShadowByte.exeis in the Downloads folder. * Use a tool to inspect the executable: * PE Explorer/CFF Explorer: Open the file in one of these tools and navigate to the sections that display header information. * Command-line: Usedumpbin /HEADERS ShadowByte.exeon Windows orreadelf -h ShadowByte.exeon Unix-like systems. * Identify the Linker Info: Look for the "Linker Version" or similar field in the output. * Interpret the value: In this case, the correct Linker Info value is2.25. References: * Microsoft Docs ondumpbinusage:Link * PE Explorer/CFF Explorer documentation.