Anubis: Analyzing Unknown Binaries
In this talk, we will present the dynamic malware analysis system
Anubis. Users can submit Windows binaries for analysis in an
instrumented Qemu emulator, and receive a report that describes the
system- and network-level behavior of the binary in a human-readable
way. Anubis has been offered by the International Secure Systems Lab as
an open service through a public website since February
We will give a quick overview on Windows binary analysis with Anubis, and then focus on two recent extensions to its analysis capabilities: First, we will talk about the extension to facilitate the submission and analysis of shellcode. Then, we will present the analysis of Android APKs, nicknamed "Andrubis".
Martina Lindorfer is a PhD student at the Secure Systems Lab at Vienna University of Technology. She holds a Master's degree from the Vienna University of Technology, as well as a Bachelor's degree from the University of Applied Science in Hagenberg. In 2012, Martina was one of the recipients of the Google Anita Borg Memorial Scholarship.
Her research focuses on the dynamic analysis of malware, especially on the evolution of malicious code and anti-analysis techniques in malware.