Malware Analyst Interview Questions

77 malware analyst interview questions shared by candidates

1. Write a program to Delete a Node in the double linked list and print the index the node was at. 2. Write a program to use windows API to read a file and check if it exists or not. 3. Explain what happens in Buffer overflow. 4. Explain what is difference between cdecl and stdcall. 5. Given a set of numbers [1, 3, 4, 5, 8] print which numbers sum is equal to [8] and also print the index of those two numbers What will be time and space complexity of your solution. 6. Explain what happens when we try to use mmap to read a file size of 10GB with the system memory only 8GB. the system uses x64 bit memory addess space. 7. explain the process capture by a malicious process to execute shell code from a process. 8. what is the difference between CreateFileA and CreateFileW There are two differences (that I know of): - CreateFileA is ANSI and CreateFileW is Unicode version. - CreateFileW can skip path parsing and use filenames of up to 32000 characters, whereas CreateFileA is limited to 260.
avatar

Senior Malware Researcher

Interviewed at Palo Alto Networks

3.7
Aug 13, 2019

1. Write a program to Delete a Node in the double linked list and print the index the node was at. 2. Write a program to use windows API to read a file and check if it exists or not. 3. Explain what happens in Buffer overflow. 4. Explain what is difference between cdecl and stdcall. 5. Given a set of numbers [1, 3, 4, 5, 8] print which numbers sum is equal to [8] and also print the index of those two numbers What will be time and space complexity of your solution. 6. Explain what happens when we try to use mmap to read a file size of 10GB with the system memory only 8GB. the system uses x64 bit memory addess space. 7. explain the process capture by a malicious process to execute shell code from a process. 8. what is the difference between CreateFileA and CreateFileW There are two differences (that I know of): - CreateFileA is ANSI and CreateFileW is Unicode version. - CreateFileW can skip path parsing and use filenames of up to 32000 characters, whereas CreateFileA is limited to 260.

A good basis and understanding of Java, JavaScript, and code in general, that were tested with bits of code presented with questions about them. There were some general questions about cybersecurity, malware, and networking.
avatar

Entry Level Malware Research

Interviewed at Alice

4.2
May 16, 2025

A good basis and understanding of Java, JavaScript, and code in general, that were tested with bits of code presented with questions about them. There were some general questions about cybersecurity, malware, and networking.

Viewing 21 - 30 interview questions

Glassdoor has 77 interview questions and reports from Malware analyst interviews. Prepare for your interview. Get hired. Love your job.