Instruction Overlap

From ema
Revision as of 12:55, 14 September 2017 by Ikirillov (talk | contribs)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to navigation Jump to search
EMA ID: ema-1271
Description: Jumping after the first byte of an instruction. Confuses some disassemblers.
Associated Behavior: linear disassembler prevention

Supporting Details:

Debug. Use different disassembly engine or different options for your disassembly engine.

Date Malware Family URL
April 5, 2010