20.500.12556/RUL-134382 Statična forenzična analiza slabogramja Static forensic analysis of malware Slabogramje dandanes predstavlja veliko nevarnost računalniškim sistemom po celem svetu. Da se lahko pred slabogramjem učinkovito zavarujemo, je potrebno razumeti njegovo delovanje, kar dosežemo z analizo slabogramja. V magistrski nalogi se osredotočimo na statične pristope analize slabogramja napisanega za arhitekturo x86. Predstavimo lastnosti programov napisanih za arhitekturo x86 in tehnike zmaličenja tovrstnih programov. Predstavimo nov program za obratno inženirstvo Ghidra in opišemo njegova glavna orodja. S programom Ghidra na dveh primerih slabogramja pokažemo praktično analizo slabogramja in povzamemo njuno delovanje. Today malware represents a large threat to computer systems worldwide. To effectively defend against malware, we first need to understand its operation, which we accomplish with malware analysis. In this master's thesis, we focus on static analysis approaches written for the x86 architecture. We present properties of programs written for the x86 architecture and their obfuscation techniques. We present a new program for reverse engineering called Ghidra and describe its main tools. We show the practical analysis of two malware samples with Ghidra and summarize their behavior. obratno inženirstvo obratno prevajanje slabogramje reverse engineering decompilation malware true false false Slovenski jezik Angleški jezik Magistrsko delo/naloga 2022-01-12 11:20:14 2022-01-12 11:20:14 2022-09-13 03:54:50 0000-00-00 00:00:00 2022 0 0 0000-00-00 NiDoloceno NiDoloceno NiDoloceno 0000-00-00 0000-00-00 0000-00-00 28769 96305923 Jesenovec_Klemen_-_Staticna_forenzicna_analiza_slabogramja.pdf Jesenovec_Klemen_-_Staticna_forenzicna_analiza_slabogramja.pdf 1 4A7D2A5C79F13568F866F001AC64873C 4ff0b4f1cb1230f3dfca9aef262b5581f9847dbe62cb9fbb964c07d426339172 0d3fc5cc-7391-11ec-abdb-00155dcfd717 https://repozitorij.uni-lj.si/Dokument.php?lang=slv&id=152802 Fakulteta za računalništvo in informatiko 0 0 0