Detection of encrypted executable files based on entropy analysis to determine the randomness measure of byte sequences

详细

A method has been proposed for identifying malicious programs that use encryption as a disguise. In this paper, a modification of the statistical spectral test based on entropy analysis has been described.