Improving proactive detection of packed malware

2006-03-01

Adrian Stepan

Microsoft, USA

Editor: Helen Martin

Abstract

Dynamic translation is a technique that can be used instead of emulation for decrypting complex malware. Adrian Stepan describes how the technique can also be used to perform generic unpacking.

The full article is available to registered users. Click here for free registration or, if you already are a registered user, login to access the full article.

Magazine


	March 2006 PDF Please register to download the PDF Comment View from the cheap seats News Hotbar adware dispute settled Updating niggles Malware prevalence report January 2006 Virus analyses Proxies for the underworld: I-Worm.Locksky.AS IM_a nuisance – W32.Imav.A Features How can a web filter add proactive security? Improving proactive detection of packed malware Comparative update Changes to the VB test sets Technical feature Solving the metamorphic puzzle Spam Bulletin Dutch police arrest Nigerian scammers China to crack down on spam Vigilant staff avert phishing scam Fighting spam with data compression models See also Virus Bulletin archives How to become a subscriber Reprints

Quick Links

Poll

The Japanese government is reported to have commissioned a 'defensive virus'. Is 'defensive' malware ever a good idea?
Leave a comment
View 11 comments

Malware Prevalence

Autorun
Encrypted/Obfuscated
Heuristic/generic
Sality
Zbot

View this month's full report

Virus Bulletin currently has 224,243 registered users.

Fighting malware and spam

Improving proactive detection of packed malware

Adrian Stepan

PDF

Comment

News

Malware prevalence report

Virus analyses

Features

Comparative update

Technical feature

Spam Bulletin

See also