19.3.1 Overview

Introduction

In this section, we propose an innovative method for detecting malware that uses combined features to classify whether a PE file is malicious or benign. We split the approaches into four stages. The first one extracts static feature information from the PE file. The second stage records the system API sequences using a sandbox and processes them by RNN. In the third stage, we...