Master's thesis
Awards: Dean's Award for an Outstanding Final Thesis

Investigating polymorphism for the D-TIME malware execution platform

Ankur Lohchab
Abstract

D-TIME, a new distributed threadless independent malware execution framework to evade runtime detection. It splits the malware executable into small chunks and executes one piece at a time in the context of an infected thread. It uses Microsoft Windows feature named Asynchronous Procedure Call (APC) to facilitate the chunk invocation, shared memory to coordinate the execution sequence of the chunk …more

Abstract

D-TIME, a new distributed threadless independent malware execution framework to evade runtime detection. It splits the malware executable into small chunks and executes one piece at a time in the context of an infected thread. It uses Microsoft Windows feature named Asynchronous Procedure Call (APC) to facilitate the chunk invocation, shared memory to coordinate the execution sequence of the chunk …more

Keywords
Cryptolocker D-TIME Malware Evasion Polymorphism Virlock.
Thesis description
The theoretical part of the thesis will include a study of polymorphism in antivirus (AV) evasion and existing polymorphic malware, with their AV evasion technique. It will also include the study of the D-TIME antivirus evasion technique [1].

The practical part of the thesis will include the implementation of the D-TIME evasion technique and propose methods to include polymorphism in D-TIME. The practical part will also include the implementation of the proposed polymorphic method and compare the results of proposed polymorphic D-TIME with the original D-TIME implementation.
Administrative information
The thesis has been checked:
19/5/2021 07:57, prof. RNDr. Václav Matyáš, M.Sc., Ph.D., UČO 344
Full text of thesis
856 KB / file PDF
Language used
English English
Defence date
22/6/2021
The thesis was defended successfully

Supervisor

prof. RNDr. Václav Matyáš, M.Sc., Ph.D., UČO 344
KPSK FI MU

Reader

doc. RNDr. Petr Švenda, Ph.D., UČO 4085
KPSK FI MU

Consultant

Mgr. Milan Patnaik
stud FI MU
Cite this text
Masaryk University Faculty of Informatics
Programme
Plan
Information Security

Theses on a related topic

List of theses with an identical keyword.

Similar documents

  • Přidání souboru

    Soubor nebo složku lze nahrát pomocí tlačítka Přidat.

  • Další operace se soubory

    Podrobnosti lze zjistit označením příslušného řádku.

  • Pohled pro experty

    Pro častou práci je možné zvolit režim Více možností.

  • Vyhledávání souborů

    Vyhledávaný výraz můžete zadat přímo do adresního řádku.

  • Rychlý přístup k souborům

    Pomocí funkce Nedávné je možné se rychle vrátit k právě prohlíženým souborům. Oblíbené soubory je také možné označit Hvězdičkou.