{"id":"https://openalex.org/W2142772656","doi":"https://doi.org/10.1109/wcre.2013.6671321","title":"PsybOt malware: A step-by-step decompilation case study","display_name":"PsybOt malware: A step-by-step decompilation case study","publication_year":2013,"publication_date":"2013-10-01","ids":{"openalex":"https://openalex.org/W2142772656","doi":"https://doi.org/10.1109/wcre.2013.6671321","mag":"2142772656"},"language":"en","primary_location":{"id":"doi:10.1109/wcre.2013.6671321","is_oa":false,"landing_page_url":"https://doi.org/10.1109/wcre.2013.6671321","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2013 20th Working Conference on Reverse Engineering (WCRE)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5076398554","display_name":"Luk\u00e1\u0161 \u010eurfina","orcid":null},"institutions":[{"id":"https://openalex.org/I60587646","display_name":"Brno University of Technology","ror":"https://ror.org/03613d656","country_code":"CZ","type":"education","lineage":["https://openalex.org/I60587646"]}],"countries":["CZ"],"is_corresponding":false,"raw_author_name":"Lukas Durfina","raw_affiliation_strings":["Faculty of Information Technology, Brno University of Technology, Brno, Czech Republic","IT4Innovations Centre of Excellence, Brno University of Technology, Brno, Czech Republic"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Faculty of Information Technology, Brno University of Technology, Brno, Czech Republic","institution_ids":["https://openalex.org/I60587646"]},{"raw_affiliation_string":"IT4Innovations Centre of Excellence, Brno University of Technology, Brno, Czech Republic","institution_ids":["https://openalex.org/I60587646"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5080191028","display_name":"Jakub K\u0159oustek","orcid":null},"institutions":[{"id":"https://openalex.org/I60587646","display_name":"Brno University of Technology","ror":"https://ror.org/03613d656","country_code":"CZ","type":"education","lineage":["https://openalex.org/I60587646"]}],"countries":["CZ"],"is_corresponding":false,"raw_author_name":"Jakub Kroustek","raw_affiliation_strings":["Faculty of Information Technology, Brno University of Technology, Brno, Czech Republic","IT4Innovations Centre of Excellence, Brno University of Technology, Brno, Czech Republic"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Faculty of Information Technology, Brno University of Technology, Brno, Czech Republic","institution_ids":["https://openalex.org/I60587646"]},{"raw_affiliation_string":"IT4Innovations Centre of Excellence, Brno University of Technology, Brno, Czech Republic","institution_ids":["https://openalex.org/I60587646"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5031228172","display_name":"Petr Zemek","orcid":null},"institutions":[{"id":"https://openalex.org/I60587646","display_name":"Brno University of Technology","ror":"https://ror.org/03613d656","country_code":"CZ","type":"education","lineage":["https://openalex.org/I60587646"]}],"countries":["CZ"],"is_corresponding":false,"raw_author_name":"Petr Zemek","raw_affiliation_strings":["Faculty of Information Technology, Brno University of Technology, Brno, Czech Republic","IT4Innovations Centre of Excellence, Brno University of Technology, Brno, Czech Republic"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Faculty of Information Technology, Brno University of Technology, Brno, Czech Republic","institution_ids":["https://openalex.org/I60587646"]},{"raw_affiliation_string":"IT4Innovations Centre of Excellence, Brno University of Technology, Brno, Czech Republic","institution_ids":["https://openalex.org/I60587646"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I60587646"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":38,"citation_normalized_percentile":{"value":0.21670298,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"449","last_page":"456"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9894999861717224,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9884999990463257,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.8768362998962402},{"id":"https://openalex.org/keywords/reverse-engineering","display_name":"Reverse engineering","score":0.7381536364555359},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7381499409675598},{"id":"https://openalex.org/keywords/malware-analysis","display_name":"Malware analysis","score":0.5431538820266724},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.48330000042915344},{"id":"https://openalex.org/keywords/task","display_name":"Task (project management)","score":0.4322265088558197},{"id":"https://openalex.org/keywords/obfuscation","display_name":"Obfuscation","score":0.41905277967453003},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.3417513370513916},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.2944524884223938},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.28155240416526794},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.22409474849700928},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.1547800600528717}],"concepts":[{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.8768362998962402},{"id":"https://openalex.org/C207850805","wikidata":"https://www.wikidata.org/wiki/Q269608","display_name":"Reverse engineering","level":2,"score":0.7381536364555359},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7381499409675598},{"id":"https://openalex.org/C2779395397","wikidata":"https://www.wikidata.org/wiki/Q15731404","display_name":"Malware analysis","level":3,"score":0.5431538820266724},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.48330000042915344},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.4322265088558197},{"id":"https://openalex.org/C40305131","wikidata":"https://www.wikidata.org/wiki/Q2616305","display_name":"Obfuscation","level":2,"score":0.41905277967453003},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.3417513370513916},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.2944524884223938},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.28155240416526794},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.22409474849700928},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.1547800600528717},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.0},{"id":"https://openalex.org/C201995342","wikidata":"https://www.wikidata.org/wiki/Q682496","display_name":"Systems engineering","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/wcre.2013.6671321","is_oa":false,"landing_page_url":"https://doi.org/10.1109/wcre.2013.6671321","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2013 20th Working Conference on Reverse Engineering (WCRE)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320335322","display_name":"European Regional Development Fund","ror":"https://ror.org/00k4n6c32"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":13,"referenced_works":["https://openalex.org/W105783207","https://openalex.org/W598294359","https://openalex.org/W1548093216","https://openalex.org/W1595564425","https://openalex.org/W2099425933","https://openalex.org/W2109903957","https://openalex.org/W2111038628","https://openalex.org/W2127067802","https://openalex.org/W2617916473","https://openalex.org/W2661278065","https://openalex.org/W3023830624","https://openalex.org/W6604304453","https://openalex.org/W6740078354"],"related_works":["https://openalex.org/W2620652965","https://openalex.org/W2024170198","https://openalex.org/W4296272594","https://openalex.org/W2289039654","https://openalex.org/W2728713145","https://openalex.org/W2470502009","https://openalex.org/W2131332603","https://openalex.org/W2072617132","https://openalex.org/W4210907385","https://openalex.org/W2900526031"],"abstract_inverted_index":{"Decompilation":[0],"(i.e.":[1],"reverse":[2,14],"compilation)":[3],"represents":[4],"one":[5],"of":[6,23,56,63,69,82,95,106,116,126],"the":[7,21,48,80,114,143,149,156,163,167],"most":[8],"toughest":[9],"and":[10,41,71,169],"challenging":[11],"tasks":[12],"in":[13,47,151],"engineering.":[15],"Even":[16],"more":[17],"difficult":[18],"task":[19],"is":[20,39,52,97,109,139,176],"decompilation":[22,84,115,168],"malware":[24,72,101],"because":[25],"it":[26],"typically":[27],"does":[28],"not":[29],"follow":[30],"standard":[31,83],"application":[32],"binary":[33],"interface":[34],"conventions,":[35],"has":[36],"stripped":[37],"symbols,":[38],"obfuscated,":[40],"can":[42],"contain":[43],"polymorphic":[44],"code.":[45],"Moreover,":[46],"recent":[49],"years,":[50],"there":[51],"a":[53,87,92,104,117,122,128,135],"rapid":[54],"expansion":[55],"various":[57],"smart":[58],"devices,":[59],"running":[60],"different":[61],"types":[62,68],"operating":[64],"systems":[65],"on":[66],"many":[67],"processors,":[70],"targeting":[73],"these":[74],"platforms.":[75,107],"These":[76],"facts,":[77],"combined":[78],"with":[79],"boundedness":[81],"tools":[85],"to":[86],"particular":[88],"platform,":[89],"imply":[90],"that":[91,138],"considerable":[93],"amount":[94],"effort":[96],"needed":[98],"when":[99],"decompiling":[100,127],"for":[102],"such":[103],"diversity":[105],"This":[108],"an":[110],"experience":[111],"paper":[112,175],"reporting":[113],"real-world":[118],"malware.":[119],"We":[120],"give":[121],"step-by-step":[123],"case":[124,157],"study":[125],"MIPS":[129],"worm":[130],"called":[131],"psyb0t":[132],"by":[133,178],"using":[134],"retargetable":[136],"decompiler":[137,150],"being":[140],"developed":[141],"within":[142],"Lissom":[144],"project.":[145],"First,":[146],"we":[147,154,161],"describe":[148],"detail.":[152],"Then,":[153],"present":[155,170],"study.":[158],"After":[159],"that,":[160],"analyse":[162],"results":[164],"obtained":[165],"during":[166],"our":[171],"personal":[172],"experience.":[173],"The":[174],"concluded":[177],"discussing":[179],"future":[180],"research":[181],"possibilities.":[182]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":7},{"year":2024,"cited_by_count":5},{"year":2023,"cited_by_count":3},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":8},{"year":2020,"cited_by_count":3},{"year":2019,"cited_by_count":4},{"year":2018,"cited_by_count":4},{"year":2017,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}