Executable Analysis (PE)

Executable analysis is a fundamental aspect of cybersecurity software, involving the in-depth examination of executable files to uncover concealed malicious code and extract relevant TTPs.

We tackle Portable Executable (PE) file analysis from various angles. We employ deep structure analysis, adaptive threat analysis, and incorporate up-to-date threat intelligence. This comprehensive approach ensures top-notch protection against modern cyber threats, giving our clients peace of mind in today's digital landscape. Some of the most useful features are:

• Both generic and specific packer unpacking
• Intelligent full binary disassembly
• Certificate analysis & validation
• Detect compiler, linker, packer used
• 150+ dedicated threat indicators
• Wide-spread usage of MITRE TTPs
• Extract malware configs

You can find our three main categories of features in the tables below: