Building a mutation tool for malware

Details

Supervisors

Legay, Axel

Faculty

Ecole polytechnique de Louvain

Degree label

Master [120] en sciences informatiques, à finalité spécialisée

Abstract

The number of malware spreading on Internet grows each year, but the majority of these malware are variation of existing ones. These variations help the malware to escape the detection of antivirus solutions and be able to continue to spread while being undetected thanks to a minimum of modification. This Master Thesis aims to develop two tools: a first tool that will be a mutation tool for malware by encapsulating them into another software that will protect them against these antivirus and a second tool for detecting these kinds of "malware enveloping" software (called packers). The proposed solutions are intended to be added to the existing work of Pr Axel Legay team: SEMA, an open-source symbolic execution toolchain for malware analysis. To achieve that, we will build our solutions on top of well-established open source python software: Inceptor and PANDA.