An Efficient Technique to Destroy Split Personality Malware
Nisha Lalwani · 2012
Malware, also known as malicious code and malicious software, refers to a program that is inserted into a system, with the intent of compromising the confidentiality, integrity, or availability of the victim’s data, applications, or operating system or otherwise annoying or disrupting the victim. Security analysts extensively use virtual machines to analyze sample programs and study them to determine if they contain any malware. In the process, if the malware destabilizes the guest OS, they simply discard it and load in a fresh image. However to overcome this technique, malware developers have developed a new class of Malware called as Analysis Aware Malware or Split Personality Malware. This class detects the presence of VM and if it finds any, it hides its malicious nature and behaves like any other normal application. In this paper we will provide an approach to counter Split Personality Malware.