SEGREGATING EXECUTABLE FILES EXHIBITING NETWORK ACTIVITY

摘要

An executable file is loaded into memory. The executable file is analyzed to determine whether one or more dynamically linked libraries are referenced in an import table of the file. It can then be determined whether one or more dynamically linked libraries is adapted to contact a network