PolyPack: An automated online packing service for optimal antivirus evasion

3rd USENIX Workshop on Offensive Technologies, WOOT 2009

Volumn , Issue , 2009, Pages

  Oberheide, Jon ^a   Bailey, Michael ^a   Jahanian, Farnam ^a  

^a UNIVERSITY OF MICHIGAN   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ENGINES; PACKERS;

ANTI VIRUS; ANTI-VIRUS ENGINES; AUTOMATED SERVICES; DETECTION CAPABILITY; FEEDBACK MECHANISMS; PACKING SERVICES;

COMPUTER VIRUSES;

EID: 85084161406     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (24)

1. Fast Small Good (FSG). http://www.woodmann.com/collaborative/tools/index.php/FSG, 2009.
2. PEiD. http://www.peid.info, 2009.
3. Bitsum Technologies. PECompact. http://www.bitsum.com/pecompact.php, 2009.
4. Danilo Bzdok. Yoda’s Crypter. http://yodap.sourceforge.net, 2009.
5. Dwing. UPack. http://dwing.cjb.net, 2009.
6. Hispasec Sistemas. Virus total. http://virustotal.com, 2004.
7. Immunity, Inc. CANVAS. http://www.immunitysec.com/products-canvas.shtml, 2009.
8. Min Gyung Kang, Pongsin Poosankam, and Heng Yin. Renovo: a hidden code extractor for packed executables. In WORM’07: Proceedings of the 2007 ACM workshop on Recurring malcode, 2007.
9. Markus Oberhumer. UPX. http://upx.sourceforge.net/, 2009.
10. L. Martignoni, M. Christodorescu, and S. Jha. Omniunpack: Fast, generic, and safe unpacking of malware. In Proceedings of the Annual Computer Security Applications Conference (ACSAC), 2007.
11. Matt “skape” Miller. Using dual-mappings to evade automated unpackers. In Uninformed Journal Vol 10, 2008.
12. Arbor Networks. Arbor malware library (AML). http://www.arbornetworks.com, 2007.
13. North Star Software. NsPack. http://www.nsdsn.com/eng/index.htm, 2009.
14. Nullsoft, Inc. NSIS. http://nsis.sourceforge. net, 2009.
15. Jon Oberheide, Evan Cooke, and Farnam Jahanian. Rethinking antivirus: Executable analysis in the network cloud. In 2nd USENIX Workshop on Hot Topics in Security (HotSec 2007), August 2007.
16. Jon Oberheide, Evan Cooke, and Farnam Jahanian. CloudAV: N-Version Antivirus in the Network Cloud. In Proceedings of the 17th USENIX Security Symposium, July 2008.
17. Oreans Technology. Themida. http://www.oreans.com/, 2009.
18. Piotr Bania. Generic Unpacking of Self-modifying, Aggressive, Packed Binary Programs. http://piotrbania.com/all/articles/pbania-dbi-unpacking2009.pdf, 2009.
19. D. Quist and Valsmith. Covert Debugging: Circumventing Software Armoring. In Proc. of Black Hat USA, 2007.
20. Paul Royal, Mitch Halpin, David Dagon, Robert Edmonds, and Wenke Lee. PolyUnpack: Automating the Hidden-Code Extraction of Unpack-Executing Malware. In The 22th Annual Computer Security Applications Conference (ACSAC 2006), Miami Beach, FL, December 2006.
21. Monirul Sharif, Andrea Lanzi, Jonathon Giffin, and Wenke Lee. Automatic Reverse Engineering of Malware Emulators. In Proceedings of the IEEE Symposium on Security and Privacy (Oakland’09), 2009.
22. StarForce. ASpack. http://www.aspack.com/, 2009.
23. tHE EGOiSTE/TMG. tElock. http://programmerstools.org/node/164, 2009.
24. Toni Koivunen / Teamfurry.com. SigBuster. http://www.teamfurry.com, 2009.