Binary Analysis

This skill enables deep analysis of suspicious binary files using remote Ghidra tools and sandbox environments. You HAVE TO upload binary files to the remote first before calling any Ghidra or sandbox tools.

When to Use This Skill

Use this skill when you need to:

• Analyze suspicious executable files (.exe, .dll, .sys)
• Decompile binaries to understand their behavior
• Extract strings, imports, and exports from files
• Identify malware capabilities and techniques
• Perform static analysis on unknown binaries
• Investigate potential trojans, ransomware, or other malware
• Generate threat assessment reports

Workflow

Step 1: Perform Analysis