Open Access Open Access  Restricted Access Subscription Access

CAPY: Streamlining Static Malware Analysis with Behavioural Analysis

T. Kowshik, M. Adhithyan, N. Logha Surya, M. Mihaash Dharan, K. Sabitha

Abstract


A crucial step in cybersecurity is malware analysis, which frequently necessitates

analysts to manually switch between several tools in order to learn more about questionable files. The efficiency of threat response is decreased by this lengthy and disjointed process. We are creating CAPY, a static malware analysis tool that combines key analysis methods, to fill this gap. File fingerprinting (hashing, metadata extraction), PE structure parsing (imports, sections, compile time, architecture), string and IOC discovery, and YARA rule matching are all automated by CAPY. Faster triage and decision-making are made possible by the tool's ability to generate structured reports in JSON/html format. CAPY reduces analyst effort by combining several common analysis checks into a single, lightweight, extensible framework. It also provides a basis for future extensions into hybrid analysis with simple dynamic checks.


Full Text:

PDF

References


A Study of Malware Detection and Classification by Comparing Extracted Strings,” Proc. of the 5th Int’l Conference on Ubiquitous Information Management and Communication, ACM, 2022.

Z. Chen, E. Brophy, and T. Ward, “Malware Classification Using Static Disassembly and Machine Learning,” arXiv preprint arXiv:2201.07649, 2021.

B. Düzgün, A. Çayır, and B. Çakmak, “Benchmark Static API Call Datasets for Malware Family Classification,” arXiv preprint arXiv:2111.15205, 2021.

M. Suzuki, Y. Yamaguchi, and T. Omori, “Evaluation of Printable Character- based Malicious PE File Detection Method,” Forensic Science International: Digital Investigation, vol. 40, 2022.

S. Zhao, H. Zhang, and L. Sun, “Using Deep Graph Learning to Improve Dynamic Analysis-based Malware Detection in PE Files,” Journal of Computer Virology and Hacking Techniques, vol. 20, no. 3, pp. 205–219, 2024.

T. R. Dendere and A. Singh, “Ransomware Detection Using Portable Executable Imports,” in Proc. 19th Int. Conf. on Cyber Warfare and Security (ICCWS), Mar. 2024

M. Irfan Yousuf, I. Anwer, A. Riasat, K. T. Zia, and S. Kim, “Windows malware detection based on static analysis with multiple features,” PeerJ Computer Science, vol. 9, e1319, Apr. 2023

N. Aggarwal, P. Aggarwal, and R. Gupta, “Improving ransomware detection based on portable executable header using Xception convolutional neural network,” Computers & Security, vol. 130, 2023.

A. Pradipta and L. A. Wulandhari, “Malware Classification Using Machine Learning and Dimension Reduction Techniques on PE File Data,” Indonesian Journal of Electrical Engineering and Informatics (IJEEI), vol. 12, no. 3, 2023

K. Pratama, R. S. Munzi, A. B. Mustafa, and I. L. Kharisma, “Static Malware Detection and Classification Using Machine Learning: A Random Forest Approach,” Engineering Proceedings, vol. 107, no. 1, 2025.

“Effectively Writing YARA Rules to Detect Malware,” V. Patil, N. Kumar M, P.

Singh M, and A. Singh, IJRASET, 2025.


Refbacks

  • There are currently no refbacks.