Reply to thread

Message: <blockquote data-quote="Andy Ful" data-source="post: 1001682" data-attributes="member: 32260"><p>In many cases, some important Opcode already loaded into the memory can be modified after the malware execution. So, it is relevant what malware did before the Opcode modification. In such a case it is rather behavior-based. If the AVs could fully emulate the malware execution in all cases (before executing it in the real system), then I would agree with you.</p></blockquote><p></p>

Top