Semantic Validation of Packer Identification Tools: Characterization, Repair, and Downstream Impact
The framework uses unpackers as contracts to automatically test and fix bugs in packer identification tools without needing manual labels. It systematically detects, localizes, and repairs semantic faults by unifying tool outputs and applying signature, heuristic, or unpacker-based fixes. This process significantly improves packer identification coverage and boosts downstream malware classification accuracy.