2.2.8 Strings Window

IDA does not show strings window by default; you can bring up the strings window by clicking on View | Open Subviews | Strings (or Shift + F12). The strings window displays the list of strings extracted from the binary and the address where these strings can be found. By default, the strings window displays only the null-terminated ASCII strings of at least five characters in length. In Chapter 2, Static Analysis, we saw that a malicious binary can use UNICODE strings. You can configure IDA to display different types of strings; to do that, while you are in the strings window, right-click on Setup (or Ctrl + U), check Unicode C-style (16 bits), and click OK.  

..................Content has been hidden....................

You can't read the all page of ebook, please click here login for view all page.
Reset
3.149.234.141