Deobfuscator: An Automated Approach to the Identification and Removal of Code Obfuscation

  • Authors:
  • Jason Raber;Eric Laspe

  • Affiliations:
  • -;-

  • Venue:
  • WCRE '07 Proceedings of the 14th Working Conference on Reverse Engineering
  • Year:
  • 2007

Quantified Score

Hi-index 0.00

Visualization

Abstract

The Deobfuscator is an IDA Pro plug-in that neutralizes anti-disassembly code and transforms obfuscated code to simplified code in the actual binary. This plug-in is used in conjunction with a binary injector to remove obfuscated code and replace it with a simplified, transformed equivalent. We developed this tool in assessing strengths of protections and malware analysis for DoD government entities and commercial companies.