>> Hey everyone, welcome back to the course.
So the last video, we talked about
the different types of malware we might see.
In this video, we're going to talk about
the different components of malware.
We have things like the Crypter,
Downloader, Dropper,
Exploit, Injector,
Obfuscator, Packer, and Payload.
We'll talk about each one of those, and again,
you're going to notice that some
>> of the descriptions are
>> similar in what they do,
but you'll just want to know all
of these terms for the exam itself.
Crypter, this one's used to
conceal the actual existence of
the malware through things like obfuscation,
manipulation, and as encryption,
and encryption being probably the
most common one to Obfuscator.
Downloader, so this is going to
be things like your Trojan
that then contains additional malware,
like a rootkit for example,
and this one is going to wait
for an Internet connection to then download.
In most cases, it could be like
you plug in a USB drive to your computer,
and then as you connect to the Internet,
most people are already connected,
but if you're not connected and you then connect,
the Trojan will then activate,
and then download the other malware from wherever else,
or could be a situation
>> where you're visiting a website,
>> you've got the Internet connection,
and then it drops on your system.
Speaking of dropping, the dropper
is used to install the malware on the system.
Generally it's covert,
so the example I talked about in
the previous video where I was running a sandbox,
it had had an Adobe Flash Exploit
, I believe that's what it was,
drop on my system from Forbes,
or one of those websites through my advertising.
Generally speaking, in most cases it's pretty covert,
so you as an end-user don't even know that.
Exploit, as the name applies,
is just the code that actually
takes advantage of a particular vulnerability,
or weakness, and then exploits it as the name implies.
Injectors, this one injects the malicious code
>> into the running processes
>> and basically obfuscates itself.
>> Obfuscator, as we talked about
>> before with encryption and stuff,
>> that obfuscation is just
used to conceal the malicious code,
so we think it's something else.
The packer compresses malware files,
and we'll talk about that
>> when we talk about static malware analysis.
>> Again, when we go into the malware analysis,
we're just hitting it at a very high level.
This is not a malware we're reversing course.
You'll hear me mention that
again once we jump into the next video.
Essentially, the packer is used
>> to make it in an unreadable format,
>> so until we unpack it,
we can't actually see what the code looks like.
Then finally the payload,
we hear that terminology out there a lot.
This is just basically what performs
a desired activity, that exploit,
and then performs whatever activity
we actually wanted the malware to do.
So this video with malware,
in the next video we're going to talk
about static and dynamic malware analysis.