CaDeCFF: Compiler-Agnostic Deobfuscator of Control Flow Flattening
Weiyu Dong, Jian Lin, Rui Chang, Ruimin Wang · 2022
With the increasing influence of malware and various attacks, malware detection methods have been continuously proposed. However, in order to evade malware detection, code obfuscation which makes programs harder to understand, is widely used by malware writers. Control Flow Flattening (CFF) is a common control-flow obfuscation method. However, Control Flow Flattening deobfuscation tools have a low success rate for compilation-optimized binaries because the structural features on which the tools depend have changed.