peframe

peframe peframe è uno strumento open source per eseguire analisi statiche su malware Portable Executable e file sospetti generici. Può aiutare i ricercatori di malware a rilevare packer, xor, firma digitale, mutex, anti debug, anti macchina virtuale, sezioni e funzioni sospette, macro e molte alt...

Enhancing Decision-Making in Windows PE Malware Classification during Dataset Shifts with Uncertainty Estimation

Artificial intelligence techniques have achieved strong performance in classifying Windows Portable Executable PE malware, but their reliability often degrades under dataset shifts, leading to misclassifications with severe security consequences. To address this, we enhance an existing LightGBM...

CVE-2019-11687

An issue was discovered in the DICOM Part 10 File Format in the NEMA DICOM Standard 1995 through 2019b and continuing in current implementations. The 128-byte preamble of a DICOM file that complies with this specification can contain arbitrary executable headers for multiple operating systems,...