Today malware represents a large threat to computer systems worldwide. To effectively defend against malware, we first need to understand its operation, which we accomplish with malware analysis. In this master's thesis, we focus on static analysis approaches written for the x86 architecture. We present properties of programs written for the x86 architecture and their obfuscation techniques. We present a new program for reverse engineering called Ghidra and describe its main tools. We show the practical analysis of two malware samples with Ghidra and summarize their behavior.
|
