Obfuscation and reverse engineering of malware code

Zlonamjerni program (eng. malware) jest svaki program specifično dizajniran u svrhu nanošenja štete zaraženom sustavu, bilo da je riječ o ometanju njegova rada, preuzimanju kontrole ili krađi podataka kroz bilo kakav oblik neovlaštenog pristupa. U svrhu izbjegavanja detekcije, zlonamjerni programi skrivaju svoj kod zbog čega ih je u praksi nemoguće zagarantirano otkriti putem automatiziranih rješenja kao što su antivirusni programi. Stoga se u računarstvu svakodnevno koristi reverzni inženjering kao glavna metoda analize novih prijetnji, te razvoja novijih i učinkovitijih rješenja za njihovu detekciju. U okviru ovog rada predstavljene su i implementirane metode skrivanja kao i detekcije alata za analizu malicioznih programa, te su potom izneseni rezultati i zapažanja.Malicious program, or simply malware, is any program specifically designed for the purpose of disrupting infected systems, either by interfering with their normal functioning, taking control of them or stealing data through any kind of unauthorized access. To avoid detection, malicious programs obfuscate their code which makes foolproof detection via automated solutions such as antivirus software impossible. That is the reason why reverse engineering is used in everyday computing as a main method of analyzing new threats and development of better and more effective solutions for their detection. Within this work, different methods of obfuscation and detection of malware analysis tools have been implemented after which results and observations have been presented