Dissecting and Comparing Different Binaries to Malware Analysis

Demonstration of different kinds of structures in the binaries as a PE (header and your sessions), ELF (header and your sessions), PDF (header/ body/cross-reference table/trailer), explaining how each session works within a binary, techniques used such as packers, obfuscation with JavaScript (PDF) and more. Filipi will also explain some anti-disassembly techniques, demonstrating the action of these malware and where it would be possible to include a malicious code.

By the end of this talk, this will be clear to everyone: differences in binaries structures, how the researcher should conduct each of these kinds of analyses; and, of course, to seek more basic knowledge on file structures, software architecture and programming language.