Research and implementation of RFSM packing technology for PE files

This paper used an analysis tool at the base of understanding the portable executable file format. It presented the whole processes of the encrypting on the PE file in detail. It focused on the principle and process of packing or unpacking. The random-fusion-self-modifying-packing technology emerged. This technology uses the SDK fuse procedure. And the key procedure code on the packing lane. It making the key code in the packing can not run after unpacking. While unpacked, It self modifying code. And the procedure can not be normal operation. This paper included the technology´s principle, algorithm and implementation. The software experimental results show that the method can balance in safety and performance.