Reverse Malware Triage

Use this skill when the task is early-stage reverse engineering, malware triage, or suspicious sample assessment.

Minimum command set

Start with the shortest command set that can falsify bad assumptions:

file sample.bin
sha256sum sample.bin
strings -a -n 6 sample.bin | head -200
binwalk sample.bin             # signature scan only; add -Me to extract

Then add format-specific inspection: