Design and Development of a Command-line Tool for Portable Executable File Analysis and Malware Detection in IoT Devices
June Ho Yang, Yeonseung Ryu · International Journal of Security and Its Applications · 2015
Recently, Microsoft unveiled a new operating system called Windows 10.As it is highly expected that Windows 10 will play a significant role in the Internet of Things era, the Portable Executable (PE) format is drawing attention even more widely than before.PE is a standard file format for executables and object code used in MS Windows operating systems.Since a number of various malwares have widely spread by exploiting vulnerabilities of PE structure, the need of automatic tools for PE-malware detection is being magnified.In this paper, we designed and developed a command-line PE file analysis tool using Python language for automatic detection of Windows malware.