Disassembly
VM important test malware
Is there any anti techniques implemented?
Packer to compress
Packer and cryptor harden malware analysis
cryptor - encrypt
If we don’t find in static analysis
debugging can find reverse/malware analysis