Control Graph Flattening

From ema
Jump to navigation Jump to search
EMA ID: ema-1105
Description: Flattening the control flow of each function by first breaking up the nesting of loops and if-statements, and then hiding each of them in a case of a large switch statement, that is wrapped inside the body of a loop.
Associated Behavior: linear disassembler prevention


References:
Date Malware Family URL
http://unprotect.tdgt.org/index.php/Anti-disassembly