E
EpochZero Team
25 Sept 2026
This is the discussion thread for the lesson "Import Address Table (IAT) Analysis" (Reverse Engineering and Malware Analysis, Unit 2). Ask questions, share real-world examples, and help classmates who are stuck.
Conversation starters. Try explaining one of these in your own words:
- Explain the role of the IAT and how Windows populates it at load time
- Identify at least eight suspicious API functions and describe what each implies
- Explain what a stripped IAT containing only LoadLibraryA and GetProcAddress means