17 March 2008

The task of analyzing malware is a growing problem. This problem is not only due to the pure volume of malicious files, but is further compounded by malware author’s increasing usage of compressors or packers. Often requiring the infection of real systems to reverse engineer, analyzing malware packed with these packers/protectors has been a difficult task for analysts in the past. Now, thanks to a new update of the Norman SandBox products, malware analysts are able to utilize the automatic analysis capabilities of the Norman SandBox Analyzer and the advanced debugging capabilities of the Norman SandBox Analyzer Pro on the trickiest packers, such as Themida and Slovak Protectors (SVKP).

But that is not all this latest update to the Norman SandBox includes. These products now support detection of malware using rootkit technology to hide. “Our customers had noticed an increase in these threats and expressed their desire for these updates, we are really pleased to be able to deliver the best possible service to our customers, and we feel it is a great testament to the power of our solutions,” said Arvid Gomez, Norman's Vice President responsible for the SandBox product range.