Static Analysis Method on Portable Executable Files for REMNUX based Malware Identification

Abstract

Malware is one of the most dangerous threats in the digital world today and in the future. Today, technological developments do not only give benefits but also reap serious challenges. One of the threats is the breach of computer network security system. Malware can be inserted anywhere, especially on various types of files that can be downloaded from the internet. It is important to analyze malware for of its complex development. This research projects our work on testing and analyzing executable files by utilizing various tools on REMnux operating system. It is aimed to recognize whether a file is safe or contains malware. The results of this study indicated that REMnux can be an appropriate tool to check a file’s characteristics in the form of malware or not based on anomalous data check, metadata of file integrity, section entropy, and function that will be executed by that executable file. In addition, the results can also estimate the impact of malware performance if the file execution is not intentionally done by reverse engineering.