Automated Static Malware Analysis with Pythonect
Itzik Kotler <[email protected]> Thu, 23 Aug 2012 11:28:30 +0300
| Newsgroups | gmane.comp.security.virus,gmane.comp.security.honeypots |
|---|---|
| Message-ID | <CAD-_V76ZHQJQ8S8-4wSS3Zs1T-AvuF5927uuuwy8RFWrShwyog@mail.gmail.com> |
Hi All, I wanted to share with you a post I wrote about how to automate static malware analysis with Pythonect: http://blog.ikotler.org/2012/08/automated-static-malware-analysis-with.html Pythonect is a new, experimental, general-purpose dataflow programming language based on Python. In this post I explain the benefits of using dataflow programming in research and analysis of malware. Additionally I have provided some examples: computing MD5 and SHA1 digests, searching for all the INT 3 instructions occurrences, and Shannon's entropy calculation. I'd appreciate any feedback you can give me on the content. Regards, Itzik Kotler | http://www.ikotler.org --------------------------------------------------------------------------- This list is sponsored by: Black Hat Attend Black Hat USA, July 28-August 2 in Las Vegas, the world's premier technical event for ICT security experts. Featuring 30 hands-on training courses and 90 Briefings presentations with lots of new content and new tools. Network with 4,000 delegates from 70 nations. Visit product displays by 30 top sponsors in a relaxed setting. http://www.blackhat.com ---------------------------------------------------------------------------