Defensive malware triage

Use only an authorized sample in a disposable isolated analysis environment. Disable shared folders, clipboard, host credentials and live outbound networking before dynamic execution; use simulated services. Do not upload private samples to public sandboxes without explicit disclosure approval. Static-tool parsers are also attack surfaces.

# File identification
file sample.exe
sha256sum sample.exe

# String extraction
strings -a sample.exe | head -100
FLOSS sample.exe  # Obfuscated strings

# Packer detection
diec sample.exe   # Detect It Easy
exeinfope sample.exe