Scanning Binaries For PE Format Anomalies
ID: 4e0aedc6-78a9-590b-9b78-9073c1276df9
STIX ID: report--4e0aedc6-78a9-590b-9b78-9073c1276df9
Feed Name: Zscaler Security Research Blog
Threat Score
This report presents statistical findings from analysis of malicious PE binaries, highlighting common entry-point byte sequences, prevalent section names (noting UPX and UPack), typical section counts, numerous unusual/Chinese section names, and an anomaly-score distribution intended to help researchers validate and cluster suspicious samples.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.