Dynamic Binary Instrumentation for Deobfuscation and Unpacking - Inria - Institut national de recherche en sciences et technologies du numérique
Communication Dans Un Congrès Année : 2009

Dynamic Binary Instrumentation for Deobfuscation and Unpacking

Résumé

We propose to extend the toolbox of reverse engineers beyond disassemblers, debuggers and emulators. Using dynamic binary instrumentation, it is very simple to write advanced tools such as automatic unpackers, system call tracers and deobfuscators. Based on our experiments, DBI is suitable for malware analysis. In this presentation, we will present a simple and accurate automatic unpacker integrated with IDA Pro and a Javascript deobfuscator, all written using DBI techniques.
Fichier non déposé

Dates et versions

inria-00431666 , version 1 (12-11-2009)

Identifiants

  • HAL Id : inria-00431666 , version 1

Citer

Daniel Reynaud, Jean-Yves Marion. Dynamic Binary Instrumentation for Deobfuscation and Unpacking. IN-DEPTH SECURITY CONFERENCE 2009 EUROPE, Nov 2009, Vienne, Austria. ⟨inria-00431666⟩
443 Consultations
0 Téléchargements

Partager

More