Malware Analysis with Multiple Features
Malware analysis process is being categorized into static analysis and dynamic analysis. Both static and dynamic analysis have their own strengths and weaknesses. In this paper, we present a tool written in Python programming language called as pi-ngaji, which could assist the work of malware analys...
| Main Authors: | , , |
|---|---|
| Format: | Proceeding Paper |
| Language: | English English |
| Published: |
2012
|
| Subjects: | |
| Online Access: | http://irep.iium.edu.my/23655/ http://irep.iium.edu.my/23655/4/najmi_conf_UKSim2012_4682z004.pdf http://irep.iium.edu.my/23655/7/najmi_conf_full_paperUKSim2012.pdf |
| _version_ | 1848779190910844928 |
|---|---|
| author | Ahmad Zabidi, Muhammad Najmi Maarof, Mohd Aizaini Zainal, Anazida |
| author_facet | Ahmad Zabidi, Muhammad Najmi Maarof, Mohd Aizaini Zainal, Anazida |
| author_sort | Ahmad Zabidi, Muhammad Najmi |
| building | IIUM Repository |
| collection | Online Access |
| description | Malware analysis process is being categorized into static analysis and dynamic analysis. Both static and dynamic analysis have their own strengths and weaknesses. In this paper, we present a tool written in Python programming language called as pi-ngaji, which could assist the work of malware analyst to get the static features of malware. pi-ngaji contains several modules - Application Programming Interface (API) calls extractor, binary entropy information, anti virtual machine and anti debugger detector and XOR encrypted strings decryptor. pi-ngaji was developed in order to assist our work in getting malware features. pi-ngaji is focusing on ripping Microsoft Windows executable binaries' malicious features. |
| first_indexed | 2025-11-14T15:13:51Z |
| format | Proceeding Paper |
| id | iium-23655 |
| institution | International Islamic University Malaysia |
| institution_category | Local University |
| language | English English |
| last_indexed | 2025-11-14T15:13:51Z |
| publishDate | 2012 |
| recordtype | eprints |
| repository_type | Digital Repository |
| spelling | iium-236552012-07-27T01:26:59Z http://irep.iium.edu.my/23655/ Malware Analysis with Multiple Features Ahmad Zabidi, Muhammad Najmi Maarof, Mohd Aizaini Zainal, Anazida QA75 Electronic computers. Computer science QA76 Computer software Malware analysis process is being categorized into static analysis and dynamic analysis. Both static and dynamic analysis have their own strengths and weaknesses. In this paper, we present a tool written in Python programming language called as pi-ngaji, which could assist the work of malware analyst to get the static features of malware. pi-ngaji contains several modules - Application Programming Interface (API) calls extractor, binary entropy information, anti virtual machine and anti debugger detector and XOR encrypted strings decryptor. pi-ngaji was developed in order to assist our work in getting malware features. pi-ngaji is focusing on ripping Microsoft Windows executable binaries' malicious features. 2012-03-30 Proceeding Paper PeerReviewed application/pdf en http://irep.iium.edu.my/23655/4/najmi_conf_UKSim2012_4682z004.pdf application/pdf en http://irep.iium.edu.my/23655/7/najmi_conf_full_paperUKSim2012.pdf Ahmad Zabidi, Muhammad Najmi and Maarof, Mohd Aizaini and Zainal, Anazida (2012) Malware Analysis with Multiple Features. In: UKSim 14th International Conference on Computer Modelling and Simulation, UKSim2012 (UKSim2012), 28-30th March 2012, University of Cambridge, United Kingdom. (Unpublished) http://www.uksim2012.info/ |
| spellingShingle | QA75 Electronic computers. Computer science QA76 Computer software Ahmad Zabidi, Muhammad Najmi Maarof, Mohd Aizaini Zainal, Anazida Malware Analysis with Multiple Features |
| title | Malware Analysis with Multiple Features |
| title_full | Malware Analysis with Multiple Features |
| title_fullStr | Malware Analysis with Multiple Features |
| title_full_unstemmed | Malware Analysis with Multiple Features |
| title_short | Malware Analysis with Multiple Features |
| title_sort | malware analysis with multiple features |
| topic | QA75 Electronic computers. Computer science QA76 Computer software |
| url | http://irep.iium.edu.my/23655/ http://irep.iium.edu.my/23655/ http://irep.iium.edu.my/23655/4/najmi_conf_UKSim2012_4682z004.pdf http://irep.iium.edu.my/23655/7/najmi_conf_full_paperUKSim2012.pdf |