Dynamic Binary Instrumentation for Deobfuscation and Unpacking - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Conference Papers Year : 2009

Dynamic Binary Instrumentation for Deobfuscation and Unpacking

Abstract

We propose to extend the toolbox of reverse engineers beyond disassemblers, debuggers and emulators. Using dynamic binary instrumentation, it is very simple to write advanced tools such as automatic unpackers, system call tracers and deobfuscators. Based on our experiments, DBI is suitable for malware analysis. In this presentation, we will present a simple and accurate automatic unpacker integrated with IDA Pro and a Javascript deobfuscator, all written using DBI techniques.
No file

Dates and versions

inria-00431666 , version 1 (12-11-2009)

Identifiers

  • HAL Id : inria-00431666 , version 1

Cite

Daniel Reynaud, Jean-Yves Marion. Dynamic Binary Instrumentation for Deobfuscation and Unpacking. IN-DEPTH SECURITY CONFERENCE 2009 EUROPE, Nov 2009, Vienne, Austria. ⟨inria-00431666⟩
379 View
0 Download

Share

Gmail Facebook X LinkedIn More