MBCProject-mbc-markdown/discovery/code-discovery.md

ID	B0046
Objective(s)	Discovery
Related ATT&CK Techniques	None
Version	2.0
Created	10 November 2021
Last Modified	31 October 2022

Code Discovery

Malware may inspect code or enumerate aspects.

Methods

Name	ID	Description
Enumerate PE Sections	B0046.001	Malware enumerates virtual offsets of code sections.
Inspect Section Memory Permissions	B0046.002	Malware identifies section memory permissions from image section header.
Parse PE Header	B0046.003	Malware parses the PE header.