Chosen-instruction attack against commercial code virtualization obfuscators

• Main Authors: LI, Shijia, JIA, Chunfu, QIU, Pengda, CHEN, Qiyuan, MING, Jiang, GAO, Debin
• Format: text
• Language: English
• Published: Institutional Knowledge at Singapore Management University 2022
• Subjects: Information Security; OS and Networks
• Online Access: https://ink.library.smu.edu.sg/sis_research/7354; https://ink.library.smu.edu.sg/context/sis_research/article/8357/viewcontent/ndss_22.pdf
• Institution: Singapore Management University

—Code virtualization is a well-known sophisticated obfuscation technique that uses custom virtual machines (VM) to emulate the semantics of original native instructions. Commercial VM-based obfuscators (e.g., Themida and VMProtect) are often abused by malware developers to conceal malicious behavior...