Reverse code engineering: An in-depth analysis of the bagle virus

Proceedings from the 6th Annual IEEE System, Man and Cybernetics Information Assurance Workshop, SMC 2005

Volumn 2005, Issue , 2005, Pages 380-387

  Rozinov, Konstantin ^a  

^a POLYTECHNIC UNIVERSITY   (United States)

Author keywords

Bagle; Beagle; FFSig; Functional flow; RCE; Reverse code engineering; Reverse engineering; Virus; Worm

Indexed keywords

BAGLE VIRUS; FFSIG; FUNCTIONAL FLOW; REVERSE CODE ENGINEERING; WORM;

CODE CONVERTERS; COMPUTER VIRUSES; COMPUTER WORMS; ENGINEERS; PROBLEM SOLVING;

REVERSE ENGINEERING;

EID: 33745434458     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/IAW.2005.1495977     Document Type: Conference Paper

References (13)

1. J. O. Kephart and W. C. Arnold, "Automatic Extraction of Computer Virus Signatures," Proceedings of the 4th Virus Bulletin International Conference, R. Ford, ed., Virus Bulletin Ltd., Abingdon, England, 1994, pp. 178-184.
2. K. Rozinov, "Reverse Code Engineering: An In-Depth Analysis of the Bagle Virus," August 2004, http://rozinov.sfs.poly.edu.
3. K. Rozinov, "PE File Infection Techniques," February 2005, http://rozinov.sfs.poly.edu.
4. Windows XP: http://www.microsoft.com.
5. DataRescue IDA Pro: http://www.datarescue.com.
6. Microsoft Visual C++: http://www.microsoft.com.
7. UltraEdit: http://www.ultraedit.com.
8. Microsoft Virtual PC: http://www.microsoft.com.
9. Sun Solaris 9: http://www.sun-com.
10. Qmail: http://www.qmail.org.
11. BIND: http://www.isc.org.
12. Microsoft MSDN: http://msdn.microsoft.com.
13. VX Heavens: http://vx.netlux.org.