https://www2.cs.arizona.edu/~collberg/Teaching/466-566/2012/Handouts/Handout-16.pdf This is the best resource in academia that I have found on #obfuscation via #OpaquePredicates and insertion of #boguscontrolflow Specifically, to describe #ControlFlowFlattening as employed by #Emotet malware, refer to slide 7 as presented by Chenxi Wang of #UniversityOfArizona, which she calls #Chenxification. #cybersecurity #malware #malwaredevelopment #codeobfuscation.
#obfuscation #opaquepredicates #boguscontrolflow #controlflowflattening #emotet #universityofarizona #chenxification #cybersecurity #malware #malwaredevelopment #codeobfuscation
#MixedBooleanArithmetics is the process of using the integers returned from arithmetic operators, with bitwise operators such as AND, OR, XOR, NEGATE, etc. It has many practical applications, including creating #OpaquePredicates, #ObfuscatingPointers, #OrdinalObfuscation before deobfuscating it in a LoadLibraryW -> GetProcAddress() function, or running #junkcode to fool sandboxes. The latter is particularly interesting because instead of merely exiting, we can keep testing for sandbox conditions
#mixedbooleanarithmetics #opaquepredicates #obfuscatingpointers #ordinalobfuscation #junkcode