Static and dynamic analysis of macOS and iOS samples
As we know now, the most common programming languages that are used to write code for Apple platforms are Objective-C and Swift. The disassembly will look different depending on which language the malware author chooses, but in both cases, pretty much the same tools can be used for analysis.
Let’s take a look at the options available on the market in order to facilitate the reverse-engineering of macOS and iOS programs.
Static analysis
For engineers who don’t have immediate access to a Mac computer or a VM available to run malware on, it is beneficial that most of the static analysis tools are available on multiple platforms, so the analysis can be performed on other operating systems as well.
Retrieving samples
Before any actual malicious code can be analyzed, it first needs to be obtained. Here is how it can be done, depending on the way it is distributed:
- 7-Zip: This tool can be used to extract...
