5 papers
A Core-Structure-Based Automated Analysis Tool for Commercial Virtualization Obfuscation Deobfuscation
Wanju Kim, Seoksu Lee, Eun-Sun Cho
Virtualization obfuscation is a more powerful obfuscation technique compared to other obfuscation methods, and as it is increasingly being applied to malware, it demands significan…
Towards LLM-Based Analysis of Virtualization-Obfuscated Code through Automated Data Generation
Sangjun An, Hyeyeon Park, Yejin Son +2
Virtualization-based obfuscation produces extremely large and structurally complex binaries, posing challenges for LLM-based analysis due to input size limits and the need for larg…
Scrambler: Mixed Boolean Arithmetic Obfuscation Tool Using E-graph and Equality Expansion
Seoksu Lee, Sangjun An, Eun-Sun Cho
We propose Scrambler, and e-graph-based MBA obfuscation tool using Equality Expansion to efficiently generate complex and diverse expressions with equivalence guaranteed by constru…
Static Detection of Core Structures in Tigress Virtualization-Based Obfuscation Using an LLVM Pass
Sangjun An, Seoksu Lee, Eun-Sun Cho
Malware often uses obfuscation to hinder security analysis. Among these techniques, virtualization-based obfuscation is particularly strong because it protects programs by translat…
Simplifying MBA Expression Using E-Graphs
Seoksu Lee, Hyeongchang Jeon, Eun-Sun Cho
Code obfuscation involves the addition of meaningless code or the complication of existing code in order to make a program difficult to reverse engineer. In recent years, MBA (Mixe…