This repository contains additional material for the Paper Analysis, Anti-Analysis, Anti-Anti-Analysis: An Overview of the Evasive Malware Scenario.
- Provide implementations for known anti-analysis tricks.
- Evaluate these detectors in distinct usage scenarios.
- Analyze distinct datasets regarding their anti-analysis tricks.
The Whitepaper directory contains additional material for the published paper, including additional discussion, graphs, and so on.
The Tricks directory contains some assembly implementations of the mentioned tricks. These can be used for validating our detectors.
The Detectors directory contains python implementation for the tricks detectors.
Data and Results
The Data directory describes names, hashes, and tricks detected for each binary/used dataset.
The Misc directory contains some code and other stuff used for additional tests.
The paper Analysis, Anti-Analysis, Anti-Anti-Analysis: An Overview of the Evasive Malware Scenario will appear in Proceedings of SBSEG 2017.