Ghidra Software Reverse-Engineering for Beginners - Second Edition

17

Unpacking in-the-Wild Malware

One of the crucial skills and core competencies for a reverse engineer specializing in malware analysis is their ability to unpack or de-obfuscate malicious software. According to multiple authoritative sources, approximately half a million new malware samples are generated each day. These represent new files, or more specifically, new file hashes, which do not necessarily correspond to entirely novel functionalities. Instead, these new malware hashes often belong to the same malware family but are meticulously packed or obfuscated to create distinct hashes. This intentional obfuscation is primarily employed to make analysis harder and circumvent signature-based detection mechanisms used by antivirus software, ...