NotPacked++: Evading Static Packing Detection
(2024) Black Hat Arsenal Europe 2024 — Location: London (11.December.2024)
Files
eu24-dhondt-notpackedpp.pdf
Open Access - Adobe PDF
- 3.48 MB
Details
- Authors
- Abstract
- NotPacked++ is an adversarial weaponized tool to alter a packed executable to evade static packing detection. It is designed to be used by malware analysts to test the effectiveness of their detection mechanisms and to improve their detection capabilities. It is also useful for red teamers to test the effectiveness of their evasion techniques, and highlight potential weaknesses of a target's security mechanisms.
- Affiliations
Citations
D’Hondt, A., Bertrand Van Ouytsel, C.-H., Legay, A., & Ramhani, J. (2024). NotPacked++: Evading Static Packing Detection. Black Hat Arsenal Europe 2024, London. https://hdl.handle.net/2078.5/236762