3 ms·
Oh, and all your EXE-files will also be marked as viruses by the way (since you're most likely using a "self-executing-unpacker-code + data" architecture, which
by icehawk 15y ago
Oh, and all your EXE-files will also be marked as viruses by the way (since you're most likely using a "self-executing-unpacker-code + data" architecture, which is considered a risk-factor by most antiviruses, no idea why).
Because most malware does this exact thing to obfuscate its payload. Here's a good example of the relative entropy distribution of malware executables versus non-malware executables on page 26 and 27:
http://www.virusbtn.com/pdf/conference_slides/2007/CaseySheehanVB2007.pdf http://www.virusbtn.com/pdf/conference_slides/2007/CaseyShee...