A Research and Verification of MFC Framework-aware Virus Infection Technology

Portable Executable (PE) virus technology is an important threat factor in the field of network security. With continuous upgrading of malware detection technology, virus infection technology will also gradually evolve from infecting the structure of the PE file to infecting the deeper structure of the program, and thus achieve higher level of stealthiness and confrontation. This paper proposes a structure-aware virus infection technology for Microsoft Foundation Classes (MFC) software framework, aiming to explore a new method of virus infection. This research aims to verify the virus infection method of MFC program framework perception through experiments, and then provides a solution to the new PE virus, which can help improve the current level of heuristic malware detection technology.