0

I have a query regarding different BB count using two different tools.

I have an output file (.txt) against a binary which contains different features about it. I have written IDAPython code to produce the same result as number of BB's and number of instruction in each BB etc. and address as well.

When I compared my result with the one already generated by the BN tool, they are different. Number of BB's are almost 1000 less compared to BN.

May anyone guide me to understand the issue? Regards.

3
  • what type of binary are u using for the test? how big is that? these two are different tools, so there could be algorithmic differences. it is also possible that your tools are incorrectly implemented or not identical in their operation
    – R4444
    Jul 12 at 4:34
  • Sir, i am using bot.exe and botcmd.exe of carbanak malware because BN analysis is available. Sir, there were many files for the different verion of carbanak. I have found 1 version of the malware which result is almost equal to my results in case of number of basic blocks. but now no of instructions per BB is different. I am working on it yet but no useful outcome. static analysis of binary with different binary will be different but difference of 1000 BB is not possible.
    – Nav60
    Jul 13 at 17:08
  • after some working, i have found problem in my converted code and now result are similar to BN file.
    – Nav60
    Aug 8 at 16:15

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.