Questions tagged [dynamic-analysis]

Dynamic analysis extracts information about programs by executing them on a real or virtual processor.

Dynamic analysis is a method for extracting information about programs or the data they process, by collecting critical data during program execution. This can overcome the problem of a static analysis, which is often too conservative ("some event E might occur"), by providing evidence that some specific events (e.g., E) did occur.

A first issue is deciding what information to collect.

A difficult issue is how to insert data-collecting probes into the runtime code:

  • hide the instrumentation in runtime libraries or OS used by the program
  • patch the object code
  • trap code pages of interest and simulate the critical part
  • simulate the entire program execution and collect data as needed
  • modify the source code to insert the instrumentation

Another issue is whether the data collection process interferes with program execution; this is especially important for programs with real time constraints.

64 questions
0
votes
1 answer

How to collect memory profiler information from android studio?

I want to collect the number of allocated objects (java object) in each method of an Activity in an Android application. For example, void onCreate(...) { ... ... ObjectType1 obj1 = new objectType1(); ObjectType1 obj2 = new objectType1(); } In…
tahiat
  • 116
  • 8
0
votes
0 answers

Cuckoo Sandbox Error "You're not running the Cuckoo Agent as Administrator"

I'm doing dynamic analysis using cuckoo sandbox but I have a problem there. I'm putting our malware files on Cuckoo. However, some files do not give any reports. I put the some example of the cuckoo's logs under the writing. Please help me!!! …
0
votes
0 answers

how could I hook a boolean function and change the return value with frida?

I am new to frida and I tried several methods with no luck.. I am attempting to modify the return value of the boolean function to be false but I keep getting the following error: Process crashed: java.lang.NullPointerException: Attempt to invoke…
0
votes
1 answer

Daikon failing to run: "Error at line 1 in file example.dtrace: No declaration was provided for program point program.point:::POINT"

I am attempting to run Daikon on a .decls and .dtrace file I generated from a CSV file using an open-source perl script. The .decls and .dtrace file will be provided below. The daikon.jar file is held within a directory, which has a sub-directory…
Xavier C
  • 21
  • 2
0
votes
0 answers

Monitoring SMS sent by Android application using emulator

I have an Android malware APK which is sending out SMS messages and subsequently deleting them, so they are not visible in the Messages app. The code of the application is obfuscated, so I am not able to read the code. I want to find out the content…
0
votes
0 answers

How to get java's execution data using javaagent

I am doing something about getting execution logs form a java program. But I just achieve this when it's a jar file using command like java -javaagent:agent1.jar -jar MyProgram.jar . But if there is a software which don't need using java -jar to…
Maon
  • 9
  • 1
0
votes
1 answer

Floating Point Instructions in x86 Disassembly of PolyBench Suite

I am trying to count the number of dynamic floating-point instructions executed by the CPU in the binary created by GCC for the 30 different programs from the poly bench benchmark using the pin tool. All the floating instructions in x86 are under…
Piyush Kansal
  • 103
  • 1
  • 9
0
votes
0 answers

Simulate a server-side GET request for a C program

I am currently investigating a compiled C program. I know that it makes several network requests due to several calls to socket, gethostbyname and connect throughout the code. Furthermore, I know it is making a GETrequest because i have run strings…
4e554c4c
  • 478
  • 3
  • 12
0
votes
2 answers

Python interface to dynamic binary instrumentaton framework PIN

I work in analyzing binary files, using Python. I have been using debuggers to do a dynamic analysis (i.e running the application and using breakpoints to get runtime execution). however, results can be improved if i can use some binary…
0
votes
1 answer

How to find equivalent APIs of static analysis report in dynamic report?

I have two reports of static and dynamic malware analysis, really there are some APIs of MSVCRT's dll in my static report (such as _p_commode,_setusermatherr ,...) that there aren't in dynamic report. I don't know exactly does have equivalent APIs…
0
votes
0 answers

Writing a file to an internal storage on Android emulator

I built an app that writes a file to a phone's internal storage. I have tested on my actual Android phone and it worked. I also tested it on Android Studio emulator running API 16 Google Nexus 4. Right now I am trying to run a dynamic analysis tool…
Jaehyuk Oh
  • 127
  • 2
  • 11
0
votes
1 answer

dynamic Input generator for web applications

I'm going to analyse web applications by using dynamic analysis. Now I need an input generator that could generate the input. Is there any open sourced tool achieve this? I've read lots of papers, such as Apollo, but it seems that they didn't…
0
votes
1 answer

Android: Differntiate running Apps from other processes in android

I did run ps command in shell on my phone. The question is how can I differentiate processes related to applications which I executed as a normal phone user such as Google Play, Adobe Reader and etc.? As I noticed some processes are run by user…
VSB
  • 9,825
  • 16
  • 72
  • 145
0
votes
1 answer

get detailed process information in Android

I'm going to write an app to do dynamic analysis of processes. In order to achieve this I want to have detailed statistics about process running on my phone. Note: I have rooted phone so some limits are removed. So here is my question, how can I…
VSB
  • 9,825
  • 16
  • 72
  • 145
0
votes
0 answers

How to intercept code in PHP dynamically at runtime?

I need a PHP tool, an extension or something, that will let me analyse all the code being executed in a PHP script dynamically (not a static analysis tool), for example: I have an interface with some methods and some classes which implement this…
tonix
  • 6,671
  • 13
  • 75
  • 136