THREATOPS
THREAT OPSThreat News › Some Malicious PE Stats, (Thu, Aug 27th)

Some Malicious PE Stats, (Thu, Aug 27th)

lowsans_iscPublished 2026-08-28

During my last FOR610 session, a student asked me if I had some statistics in mind about the compilers used to generate malicious PE files? A couple of months ago, I shared some stats about the trend in 64bits VS. 32bits malware[1]. Can we go a bit further? I (vibe-)coded a Python script based on the pefile library[2] to extract some info from the PE headers. Indeed, the PE file format contains a

Original source: https://isc.sans.edu/diary/rss/33292