{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,21]],"date-time":"2026-04-21T15:06:23Z","timestamp":1776783983819,"version":"3.51.2"},"reference-count":21,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2013,10]]},"DOI":"10.1109\/wcre.2013.6671321","type":"proceedings-article","created":{"date-parts":[[2013,12,3]],"date-time":"2013-12-03T17:00:42Z","timestamp":1386090042000},"page":"449-456","source":"Crossref","is-referenced-by-count":23,"title":["PsybOt malware: A step-by-step decompilation case study"],"prefix":"10.1109","author":[{"given":"Lukas","family":"Durfina","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jakub","family":"Kroustek","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Petr","family":"Zemek","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"19","year":"1995","journal-title":"Tool Interface Standard (TIS) Executable and Linking Format (ELF) Specification"},{"key":"17","first-page":"84","article-title":"Automatic C compiler generation from architecture description language ISAC","author":"husr","year":"2010","journal-title":"MEMICS10 Brno"},{"key":"18","author":"celeda","year":"2011","journal-title":"An analysis of the chuck norris botnet 2"},{"key":"15","year":"2013","journal-title":"Hex-Rays Decompiler"},{"key":"16","year":"2013","journal-title":"The Llvm Compiler Infrastructure"},{"key":"13","author":"janus","year":"2011","journal-title":"Heads of the Hydra Malware for Network Devices"},{"key":"14","doi-asserted-by":"publisher","DOI":"10.1109\/WCRE.2004.42"},{"key":"11","year":"2010","journal-title":"MIPS32 Architecture for Programmers Volume II-A The MIPS32 Instruction Set"},{"key":"12","author":"drone","year":"2009","journal-title":"Network Bluepill -stealth Router-based Botnet Has Been DDoSing DroneBL for the Last Couple of Weeks"},{"key":"21","author":"prikryl","year":"2011","journal-title":"Advanced Methods of Microprocessor Simulation"},{"key":"3","author":"szo?r","year":"2005","journal-title":"The Art of Computer Virus Research and De-fense"},{"key":"20","year":"2013","journal-title":"UPX The Ultimate Packer for eXecutables"},{"key":"2","doi-asserted-by":"crossref","first-page":"32","DOI":"10.1109\/MSP.2007.45","article-title":"Toward automated dynamic malware analysis using CWSandbox","volume":"5","author":"willems","year":"2007","journal-title":"IEEE Security and Privacy"},{"key":"1","doi-asserted-by":"publisher","DOI":"10.1007\/s11416-007-0074-9"},{"key":"10","author":"baume","year":"2009","journal-title":"Netcomm NB5 Botnet -psyb0t 2 5L"},{"key":"7","year":"2013","journal-title":"Lissom"},{"key":"6","first-page":"91","article-title":"Design of a retargetable decompiler for a static platform-independent malware analysis","volume":"5","author":"durfina","year":"2011","journal-title":"International Journal of Security and Its Ap-plications (IJSIA)"},{"key":"5","year":"2011","journal-title":"Worldwide Quarterly Mobile Phone Tracker"},{"key":"4","author":"aquilina","year":"2008","journal-title":"Malware Forensics Investigating and Ana-lyzing Malicious Code"},{"key":"9","doi-asserted-by":"publisher","DOI":"10.1109\/WCRE.2012.15"},{"key":"8","first-page":"259","article-title":"Preprocessing of binary executable files towards retargetable decompilation","author":"kroustek","year":"2013","journal-title":"ICCGI13 Nice FR International Academy Research and Industry Association (IARIA)"}],"event":{"name":"2013 20th Working Conference on Reverse Engineering (WCRE)","location":"Koblenz, Germany","start":{"date-parts":[[2013,10,14]]},"end":{"date-parts":[[2013,10,17]]}},"container-title":["2013 20th Working Conference on Reverse Engineering (WCRE)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6656028\/6671267\/06671321.pdf?arnumber=6671321","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2017,6,21]],"date-time":"2017-06-21T23:35:29Z","timestamp":1498088129000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/6671321\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2013,10]]},"references-count":21,"URL":"https:\/\/doi.org\/10.1109\/wcre.2013.6671321","relation":{},"subject":[],"published":{"date-parts":[[2013,10]]}}}