A polymorphic engine (sometimes called mutation engine or mutating engine) is a software component that uses polymorphic code to alter the payload while preserving the same functionality.

Polymorphic engines are used almost exclusively in malware, with the purpose of being harder for antivirus software to detect. They do so either by encrypting or obfuscating the malware payload.

One common deployment is a file binder that weaves malware into normal files, such as office documents. Since this type of malware is usually polymorphic, it is also known as a polymorphic packer.

The engine of the Virut botnet is an example of a polymorphic engine.[1]

References

edit
  1. ^ "The most polymorphic virus around today". Kasperky. 26 May 2021. Retrieved 2022-04-17.

📚 Artikel Terkait di Wikipedia

Polymorphic code

In computing, polymorphic code is code that uses a polymorphic engine to mutate while keeping the original algorithm intact - that is, the code changes

Software engine

Layout engine Physics engine Polymorphic engine Reasoning engine Recommendation engine Regular expression engine Search engine Workflow engine Mainstream

File binder

stealers) often include a binder by default. A polymorphic packer is a file binder with a polymorphic engine. It thus has the ability to make its payload

Computer virus

virus body. To enable polymorphic code, the virus has to have a polymorphic engine (also called "mutating engine" or "mutation engine") somewhere in its

Engine (disambiguation)

JavaScript code Chess engine, for computer chess games Database engine Game engine, for video games Polymorphic engine or mutation engine, a common component

List of JavaScript engines

JavaScript engines were interpreters of the source code, but modern engines use just-in-time compilation to improve performance. JavaScript engines are typically

Metamorphic code

metamorphic engine itself undergoes changes, which means that no part of the virus stays the same. This differs from polymorphic code, where the polymorphic engine

Self-modifying code

computation errors and application failures. Overlapping code Polymorphic code Polymorphic engine Persistent data structure AARD code Algorithmic efficiency