Skip to main navigation Skip to search Skip to main content

A new disassembly approach for binary code using dynamic multiple-path exploration and static disassembly

  • Harbin Institute of Technology

Research output: Chapter in Book/Report/Conference proceedingConference contributionpeer-review

Abstract

We present a new approach for disassembling executables with self-modifying code. Self-modifying code is very common in malware. Conventional static or dynamic approaches cannot handle self-modifying code very well. We combine static and dynamic analysis to fight against self-modifying code with the multiple-path exploration technique. The evaluation results indicate that our approach works well in disassembling executables with self-modifying code with high precision and code coverage compared with the state-of-art disassembler.

Original languageEnglish
Title of host publicationApplied Decisions in Area of Mechanical Engineering and Industrial Manufacturing
PublisherTrans Tech Publications Ltd
Pages852-855
Number of pages4
ISBN (Print)9783038351559
DOIs
StatePublished - 2014
Event3rd International Conference on Mechanical, Control, and Electronic Information, ICMCEI 2014 - , Taiwan, Province of China
Duration: 27 Jun 201429 Jun 2014

Publication series

NameApplied Mechanics and Materials
Volume577
ISSN (Print)1660-9336
ISSN (Electronic)1662-7482

Conference

Conference3rd International Conference on Mechanical, Control, and Electronic Information, ICMCEI 2014
Country/TerritoryTaiwan, Province of China
Period27/06/1429/06/14

Keywords

  • Disassembly code
  • Dynamic analysis
  • Instruction trace
  • Reverse engineering
  • Self-modifying code

Fingerprint

Dive into the research topics of 'A new disassembly approach for binary code using dynamic multiple-path exploration and static disassembly'. Together they form a unique fingerprint.

Cite this