{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,11]],"date-time":"2026-06-11T15:52:07Z","timestamp":1781193127701,"version":"3.54.1"},"publisher-location":"New York, NY, USA","reference-count":25,"publisher":"ACM","license":[{"start":{"date-parts":[[2023,8,29]],"date-time":"2023-08-29T00:00:00Z","timestamp":1693267200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2023,8,29]]},"DOI":"10.1145\/3600160.3605010","type":"proceedings-article","created":{"date-parts":[[2023,8,9]],"date-time":"2023-08-09T22:54:41Z","timestamp":1691621681000},"page":"1-10","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":14,"title":["Bypassing antivirus detection: old-school malware, new tricks"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-6507-5052","authenticated-orcid":false,"given":"Efstratios","family":"Chatzoglou","sequence":"first","affiliation":[{"name":"University of the Aegean, Greece"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0142-7503","authenticated-orcid":false,"given":"Georgios","family":"Karopoulos","sequence":"additional","affiliation":[{"name":"European Commission, Joint Research Centre (JRC), Italy"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6348-5031","authenticated-orcid":false,"given":"Georgios","family":"Kambourakis","sequence":"additional","affiliation":[{"name":"University of the Aegean, Greece"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9481-0906","authenticated-orcid":false,"given":"Zisis","family":"Tsiatsikas","sequence":"additional","affiliation":[{"name":"University of the Aegean, Greece"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2023,8,29]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"0xPat. [n. d.]. Malware development part 4 - anti-static analysis tricks. https:\/\/0xpat.github.io\/Malware_development_part_4\/. visited on 2023-03-01."},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1145\/3365001"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1109\/MALWARE.2017.8323959"},{"key":"e_1_3_2_1_4_1","unstructured":"H. Anderson. 2017. Evading Machine Learning Malware Detection."},{"key":"e_1_3_2_1_5_1","unstructured":"cr7pt0pl4gu3. [n. d.]. Shellcode loader designed for evasion. Coded in Rust. https:\/\/github.com\/cr7pt0pl4gu3\/Pestilence. visited on 2023-03-01."},{"key":"e_1_3_2_1_6_1","unstructured":"efchatz. [n. d.]. Bypassing antivirus detection: old-school malware not-so-new but still effective tricks. https:\/\/github.com\/efchatz\/bypassing-av-detection. visited on 2023-04-01."},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.3390\/electronics9101684"},{"key":"e_1_3_2_1_8_1","volume-title":"Ten process injection techniques: A technical survey of common and trending process injection techniques. Endpoint Security Blog","author":"Hosseini Ashkan","year":"2017","unstructured":"Ashkan Hosseini. 2017. Ten process injection techniques: A technical survey of common and trending process injection techniques. Endpoint Security Blog (2017)."},{"key":"e_1_3_2_1_9_1","unstructured":"Ionut Ilascu. [n. d.]. Hackers adopt Sliver toolkit as a Cobalt Strike alternative. https:\/\/www.bleepingcomputer.com\/news\/security\/hackers-adopt-sliver-toolkit-as-a-cobalt-strike-alternative. visited on 2023-03-01."},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1109\/MILCOM.2017.8170867"},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1109\/IISA56318.2022.9904382"},{"key":"e_1_3_2_1_12_1","volume-title":"2012 14th International Conference on Advanced Communication Technology (ICACT). 744\u2013749","author":"Marpaung A.P.","year":"2012","unstructured":"Jonathan\u00a0A.P. Marpaung, Mangal Sain, and Hoon-Jae Lee. 2012. Survey on malware evasion techniques: State of the art and challenges. In 2012 14th International Conference on Advanced Communication Technology (ICACT). 744\u2013749."},{"key":"e_1_3_2_1_13_1","unstructured":"MITRE. [n. d.]. Process Injection. https:\/\/attack.mitre.org\/techniques\/T1055\/. visited on 2023-04-20."},{"key":"e_1_3_2_1_14_1","unstructured":"Ne0nd0g. [n. d.]. A repository of Windows Shellcode runners and supporting utilities. The applications load and execute Shellcode using various API calls or techniques. https:\/\/github.com\/Ne0nd0g\/go-shellcode. visited on 2023-03-01."},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1049\/iet-ifs.2018.5386"},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2013.2290431"},{"key":"e_1_3_2_1_17_1","unstructured":"Checkpoint Research. [n. d.]. OPWNAI : Cybercriminals Starting to Use ChatGPT. https:\/\/research.checkpoint.com\/2023\/opwnai-cybercriminals-starting-to-use-chatgpt\/. visited on 2023-03-31."},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2023.103192"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.3390\/app13085083"},{"key":"e_1_3_2_1_20_1","unstructured":"security.org. 2023. 2023 Antivirus Market Annual Report. https:\/\/www.security.org\/antivirus\/antivirus-consumer-report-annual\/ visited on 2023-06-15."},{"key":"e_1_3_2_1_21_1","unstructured":"sezzle. [n. d.]. A simple library to encrypt and decrypt AES with strings or byte arrays. https:\/\/github.com\/sezzle\/simpleGoAES. visited on 2023-03-01."},{"key":"e_1_3_2_1_22_1","first-page":"69","article-title":"Computer worms: Architectures, evasion strategies, and detection mechanisms","volume":"4","author":"Smith Craig","year":"2009","unstructured":"Craig Smith, Ashraf Matrawy, Stanley Chow, and Bassem Abdelaziz. 2009. Computer worms: Architectures, evasion strategies, and detection mechanisms. Journal of Information Assurance and Security 4 (2009), 69\u201383.","journal-title":"Journal of Information Assurance and Security"},{"key":"e_1_3_2_1_23_1","volume-title":"Market scores held by the leading Windows anti-malware application vendors worldwide as of","year":"2021","unstructured":"Statista. 2021. Market scores held by the leading Windows anti-malware application vendors worldwide as of August 2021. https:\/\/www.statista.com\/statistics\/1267474\/market-score-antivirus-vendors-for-windows-systems\/ visited on 2023-06-15."},{"key":"e_1_3_2_1_24_1","volume-title":"Annual number of malware attacks worldwide from 2015 to","year":"2022","unstructured":"Statista. 2023. Annual number of malware attacks worldwide from 2015 to 2022. https:\/\/www.statista.com\/statistics\/873097\/malware-attacks-per-year-worldwide\/ visited on 2023-04-18."},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1109\/BWCCA.2010.85"}],"event":{"name":"ARES 2023: The 18th International Conference on Availability, Reliability and Security","location":"Benevento Italy","acronym":"ARES 2023"},"container-title":["Proceedings of the 18th International Conference on Availability, Reliability and Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3600160.3605010","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3600160.3605010","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T17:49:16Z","timestamp":1750182556000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3600160.3605010"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,8,29]]},"references-count":25,"alternative-id":["10.1145\/3600160.3605010","10.1145\/3600160"],"URL":"https:\/\/doi.org\/10.1145\/3600160.3605010","relation":{},"subject":[],"published":{"date-parts":[[2023,8,29]]},"assertion":[{"value":"2023-08-29","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}