Analyzing Malware in Binaries and Executables with AI

The post outlines how Gemini 1.5 Pro enables large-context malware analysis (up to 1M tokens), allowing comprehensive review of disassembled or decompiled code and generation of verdicts and summaries. It highlights VirusTotal Code Insight’s use of the model to analyze extensive Office macros—such as the flagged “PLEX.xlam” (34 macros, 138,332 tokens)—to clarify intent and reduce false positives, and announces plans to extend analysis to binaries while inviting community collaboration on unpacking, models, and tooling.