SYSTEM FOR GENERATING PACKER DETECTION SIGNATURE BASED ON UNPACKING ALGORITHM CHARACTERISTIC

摘要

PURPOSE: A packer detection signature generation system based on unpacking algorithm for generating a signature is provided to enable users to check which packer a packed malignant code is included. CONSTITUTION: A packer detection signature generation system based on unpacking algorithm for generating a signature comprises the following: a packing file classification module(100) classifying execution files packed by the same algorithm, and extracting unpacking algorithm; and a signature generation module(200) extracting hex sequence from the unpacking algorithm, and generating the signature for detecting a packer based on the kind and the version of the packer.