Detecting Packed Binaries Using Entropy
Budget: $30 – $250 USD
The project is detecting packed binaries using entropy analysis.Entropy has a mathematical formula as you know. There is a tool from github that can be used as a helper named "bintropy", and this tool is an "Analysis tool for estimating the likelihood that a binary contains compressed or encrypted bytes". But the tool only takes one file per time. But what is wanted from me is to test 150 packed and 150 unpacked files.. But the description which was told to me was not clear so I need help.The dealine is 12th-13rd of January 2022. I have the paper related but the paper is more harder than my project so what is wanted from me is more easier because it doesn't contain malware analysis like the paper says. It's only detecting binaries using entropy analysis. And 150 packed and 150 unpacked files should be tested. There was also packers I found on github which were recommended by the developer of the bintropy tool and I can share those just in case. As I said I used bintropy and it ran but when I used two executable files it returned True, but they weren't packed. Then I searched and I found this; bintropy program.exe: This tries to determine if program.exe is packed relying on block entropy ; this does not mean it is always right. Furthermore, this is an expected result in some cases. You can use the verbose mode to see the block entropy values and see which conditions match or not. Thank you for reading through this, let me know if you can do this till completing it, or if you're experienced at this type of projects, the deadline is 12-13rd of Jan.