Chapter 5: Bypassing the Static Engine
In this chapter, we will go into bypassing antivirus static detection engines in practical terms. We will learn the use of various obfuscation techniques that can be used to potentially bypass static antivirus engines. Furthermore, we will go through understanding the use of different encryption techniques such as oligomorphic-, polymorphic-, and metamorphic-based code that can be used to potentially bypass static antivirus engines. We will also show how packing and obfuscation techniques are used in malicious code to bypass most static engines in antivirus software.
In this chapter, we will explore the following topics:
- Antivirus bypass using obfuscation
- Antivirus bypass using encryption
- Antivirus bypass using packing