Strange File

I would like to an inspect an trojan. I found unusual exe file in my home computer. However i have formated my home pc and reinstalled the window. But i kept the .exe, I would like to test exe in vmware to see what exactly it does. What would you recommend me to sniff traffic and see what is that all about?

Thank You!

 

You could upload the exe to Virustotal first to see what other av's think it may be.

 

Welcome Itexltd,

Malware Analysis for Administrators while in no way my cup of tea appear's an appropriate overview to get you started (perhap's more time consuming than may have been anticipated). Search item's like "simple" and "practical" malware analysis for idea's. Most listing's you're likely to run into are in pdf format.

Short article covering vmware - http://searchsecurity.techtarget.com/tip/0,289483,sid14_gci1254046,00.html


GF