Towards a Fast Off-Line Static Malware Analysis Framework

Abstract

The profitability in cybercrime activity has resulted into an exponential growth of malware numbers and complexity. This has led to both industry and academic research building malware research labs to allow for deeper malware analysis so that for more efficient detection techniques can be proposed. Extended malware study could lead to development of more advanced malware signatures, potentially resulting into designing of secure systems thus a resilient cyberspace. Malware classification and clustering based on malware families and traits is an important step in malware analysis. This paper presents a comparative study of file format hashes that are used in the industry is conducted in an effort towards suggesting an approach for faster and easier offline malware classification framework.