Skip to content

gmh5225/Driver-intel-PEBs-LoopHPCs

 
 

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

1 Commit
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

LoopHPCs: loop-centric HPCs profiling .

Introduction

LoopHPCs is an loop-centric HPCs profiling framework. In the framework, we profile the loop structure of a running program with the help of two hardware mechanisms: LBR and PEBs. LoopHPCs is suitable to analysis the malware which has distinct hot loop at run-time. The current version of LoopHPCs focus on binary unpacking. In the future, we plan to extend it to analyze other types of malware, such as ransomware and cryptojacking.

Installation

requiremtns

Our framework is tested on Windows 10. before build the framework, corresponding versions of visual studio 2015 (or above)and wdk 10 need to be installed.

Usage

To load compiled dirver of LoopHPCs into OS, the user can leaverage a driver load tool (e.g., DriverMonitor) or develop a custom driver load application. The output information can by caputure by the tool of Dbgview.

About

No description, website, or topics provided.

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published