Using the Rgb Image of Machine Code to Classify the Malware

Aiming at the problem of high complexity caused by the excessive dependence of feature set on expert experience and high feature dimension in current malware classification methods, this paper proposes a classification method that is based on rgb image of assembly instructions and Convolutional Neural Network (CNN). This paper firstly gets the assembly code file of the executable malware sample, then generates rgb pixels by analyzing machine codes for each kind of assembly instructions (such as mov and add), then generates rgb images through these rgb pixels. Finally, the classification model is trained on the training sample set by using CNN. We have carried out a series of experiments, and through these experiments, it is proved that our method can be got a good result in malware classification.