The thesis aims to study static-analysis detection of cryptographic primitives' presence in Windows malicious binaries. The thesis should summarize the current state of the art and present obstacles faced by community w.r.t. analyzing malware for the presence of cryptographic primitives. The student will find a diverse, suitable dataset of Windows malicious applications and perform an exploratory study of characteristics relevant to the outlined goal. The student will select at least three different static-analysis tools suitable for detecting cryptographic primitives in binaries, evaluate their usefulness, and describe possible problems using this analysis method. Furthermore, the student shall analyze a proper subset of the chosen dataset (or the dataset as a whole, if computational resources will allow that) on the presence of the selected cryptographic primitives from various categories (symmetric encryption, asymmetric encryption, hash functions, and so forth). The thesis should convey which cryptographic primitives are the most prevalent in malicious Windows binaries from the dataset, taking into account static analysis limitations.