2

Where can I get info with a view to classify malware based on actions performed by the them. Eg. modifying registry files, copying themselves into other executable's etc.

closed as too broad by Scott Pack, Gilles, Xander, AviD Nov 25 '13 at 15:41

Please edit the question to limit it to a specific problem with enough detail to identify an adequate answer. Avoid asking multiple distinct questions at once. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.

2

If you mean how to automatically classify malware, this paper on Learning and Classification of Malware Behavior (Meta data) can be of help.

2

A good site, formerly known as cwsandbox.org is now called mwanalysis.org. Just submit a sample and it generates a behavioral report. HTH.

1

For file and registry accesses, run it in a VM with Process Monitor running or upload it to here.

1

enter the Malware name here Threat Expert and you will get a lot of useful info about that Malware

-1

you can use any API hooking application. Depends on which Ring that you want to hook.

Or Viking enough, write your own hook program.

Not the answer you're looking for? Browse other questions tagged or ask your own question.