Malware Theory - PE Malformations And Anomalies

-0DEEbQq8jU/default.jpg

We explore malformations and anomalies of the Portable Executable format. What kinds of malformations exist, why do they occur and how do they affect PE file parsers?

OALabs video with export malformation: https://www.youtube.com/watch?v=FNuFl...
Video on PE Structure: https://www.youtube.com/watch?v=l6GjU...
Video on PE Resources: https://www.youtube.com/watch?v=3Pcgw...
PoC PE files with malformations (Corkami): https://github.com/indrora/corkami/tr...
TinyPE: https://webserver2.tecgraf.puc-rio.br...
Portable Executable Malware: https://github.com/katjahahn/PortEx/r...
PortExAnalyzer: https://github.com/katjahahn/PortEx/t...

-0DEEbQq8jU/default.jpg
Malware Theory - PE Malformations And Anomalies Malware Theory - PE Malformations And Anomalies Reviewed by Anonymous on April 20, 2019 Rating: 5