August 2019
Intermediate to advanced
342 pages
9h 35m
English
After having analyzed the PE file format, we are now ready to extract the characteristics of the binary files (whether legitimate or suspect), and store them in a dataset of artifacts with which to train our algorithms.
For this purpose, we will develop Python scripts to automate the extraction of PE file format fields for each single file we analyze.
The Python library that we will use in our scripts is the famous pefile library, which was developed by Ero Carrera and is available at https://github.com/erocarrera/pefile.
Once the archive containing the library has been downloaded and unpacked locally, we can proceed with the installation by executing the following command:
python setup.py install ...
Read now
Unlock full access