원문정보
초록
영어
Recently, Microsoft unveiled a new operating system called Windows 10. As it is highly expected that Windows 10 will play a significant role in the Internet of Things era, the Portable Executable (PE) format is drawing attention even more widely than before. PE is a standard file format for executables and object code used in MS Windows operating systems. Since a number of various malwares have widely spread by exploiting vulnerabilities of PE structure, the need of automatic tools for PE-malware detection is being magnified. In this paper, we designed and developed a command-line PE file analysis tool using Python language for automatic detection of Windows malware.
목차
1. Introduction
2. Portable Executable File Format
2.1. PE File Structure
2.2. Header
2.3. Section
3. Related Works
4. Implementation Results
5. Conclusion
Acknowledgements
References
