Search Results

Now A Day’s Malwares Are Becoming Increasingly Stealthy, More And More Malwares Are Using Cryptographic Algorithms To Protect Themselves From Being Analyzed. To Enable More Effective Malware Analysis, Forensics And Reverse Engineering, We Have Developed CipherXRay – A Novel Binary Analysis Framework That Can Automatically Identify And Recover The Cryptographic Operations And Transient Secrets From The Execution Of Potentially Obfuscated Binary Executables. Based On The Avalanche Effect Of Cryptographic Functions, CipherXRay Is Able To Accurately Pinpoint The Boundary Of Cryptographic Operation And Recover Truly Transient Cryptographic Secrets That Only Exist In Memory For One Instant In Between Multiple Nested Cryptographic Operations. In Existing Mechanism Not Fully Detect The Malwares. Our Proposed Method CipherXRay Can Further Identify Certain Operation Modes Of The Identified Block Cipher And Tell Whether The Identified Block Cipher Operation Is Encryption Or Decryption In Certain Cases.