Thesis Details

Automatická detekce knihovního kódu ze spustitelných souborů typu PE

Master's Thesis Student: Mareš Petr Academic Year: 2007/2008 Supervisor: Kolář Dušan, doc. Dr. Ing.
English title
Automatic Library Code Detection in PE Executable Files
Language
Czech
Abstract

Master's thesis describes imported functions detection in PE executables, which are from static libraries. Main reason is process automatization and analysis simplification. Detection is solved by searching prepared patterns with missmatch tolerance. Missmatch are caused by changing address during building application. Resulting application supports compiler detection and it contains patterns for MinGW32, Visual studio 2005 and C++ Builder 6.

Keywords

PE executables, static library code detection, static library function recognition, compiler detection

Department
Department of Information Systems FIT BUT
Degree Programme
Information Technology, Field of Study Information Systems
Files
Status
defended, grade E
Date
19 June 2008
Reviewer
Ryšavý Ondřej, doc. Ing., Ph.D.
Committee
Hruška Tomáš, prof. Ing., CSc. (DIFS FIT BUT), předseda
Bartík Vladimír, Ing., Ph.D. (DIFS FIT BUT), člen
Fučík Otto, doc. Dr. Ing. (DCSY FIT BUT), člen
Hanáček Petr, doc. Dr. Ing. (DITS FIT BUT), člen
Meduna Alexander, prof. RNDr., CSc. (DIFS FIT BUT), člen
Rozinajová Viera, doc. Ing., Ph.D. (FIIT STU), člen
Citation
MAREŠ, Petr. Automatická detekce knihovního kódu ze spustitelných souborů typu PE. Brno, 2008. Master's Thesis. Brno University of Technology, Faculty of Information Technology. 2008-06-19. Supervised by Kolář Dušan. Available from: https://www.fit.vut.cz/study/thesis/7141/
BibTeX 
@mastersthesis{FITMT7141,
    author = "Petr Mare\v{s}",
    type = "Master's thesis",
    title = "Automatick\'{a} detekce knihovn\'{i}ho k\'{o}du ze spustiteln\'{y}ch soubor\r{u} typu PE",
    school = "Brno University of Technology, Faculty of Information Technology",
    year = 2008,
    location = "Brno, CZ",
    language = "czech",
    url = "https://www.fit.vut.cz/study/thesis/7141/"
}

Theses

Back to top