Automated Static Malware Analysis with Pythonect

Itzik Kotler <[email protected]> Thu, 23 Aug 2012 11:28:30 +0300
Newsgroups gmane.comp.security.virus,gmane.comp.security.honeypots
Message-ID <CAD-_V76ZHQJQ8S8-4wSS3Zs1T-AvuF5927uuuwy8RFWrShwyog@mail.gmail.com>
Hi All,

I wanted to share with you a post I wrote about how to automate static
malware analysis with Pythonect:

http://blog.ikotler.org/2012/08/automated-static-malware-analysis-with.html


Pythonect is a new, experimental, general-purpose dataflow programming
language based on Python.

In this post I explain the benefits of using dataflow programming in
research and analysis of malware.

Additionally I have provided some examples: computing MD5 and SHA1
digests, searching for all the INT 3 instructions occurrences, and
Shannon's entropy calculation.


I'd appreciate any feedback you can give me on the content.

Regards,
Itzik Kotler | http://www.ikotler.org

---------------------------------------------------------------------------
This list is sponsored by: Black Hat

Attend Black Hat USA, July 28-August 2 in Las Vegas, the world's premier 
technical event for ICT security experts. Featuring 30 hands-on training 
courses and 90 Briefings presentations with lots of new content and new 
tools.  Network with 4,000 delegates from 70 nations.  Visit product 
displays by 30 top sponsors in a relaxed setting.  

http://www.blackhat.com
---------------------------------------------------------------------------