Executable Analysis (PE)

Executable analysis is a crucial aspect of cybersecurity software, involving the in-depth examination of executable files to uncover concealed malicious code and extract relevant TTPs.

We approach Portable Executable (PE) file analysis from various angles, employing deep structure analysis, adaptive threat analysis, and up-to-date threat intelligence. This comprehensive approach ensures robust protection against modern cyber threats, providing peace of mind in today’s digital landscape. Key features include:

• Generic and specific packer unpacking,
• Intelligent full binary disassembly,
• Certificate analysis & validation,
• Detection of compiler, linker, packer used,
• 150+ dedicated threat indicators,
• Wide-spread usage of MITRE TTPs,
• Malware configuration extraction.

Our three main feature categories are detailed in the tables below: