About this document

Survey of Malware Unpacking Techniques by Silvio Cesare is a document available to read on EtoBox.

This document surveys techniques for unpacking malware that has been obfuscated using code packing. It begins by providing background on malware and the problem it poses. It then discusses polymorphism techniques used by malware authors to evade detection, including dead code insertion, instruction substitution, variable renaming, and code reordering. The document focuses on code packing specifically, examining how it is used as an obfuscation technique for malware. It surveys methods for identifying packed

Author

Silvio Cesare

Language

EN