Patent Document ID: 9992214
Application ID: 15083070
Patent Status: 1

Claim One:
1. A system, comprising: a processor configured to: receive a sample, wherein the sample includes a binary executable file; match one or more paths in content of the binary executable file based on a plurality of patterns, comprising to: extract a first string from the binary executable file, wherein the first string relates to debug information of the binary executable file; determine whether a path associated with the first string matches a pattern of the plurality of patterns, the pattern including a regular expression; and in response to a determination that the path matches the pattern, determine that the path is a matched path; extract meta information from the one or more matched paths, comprising to: parse a second string associated with the one or more matched paths to obtain the meta information, wherein the meta information is obtained from the second string itself, a subset of the second string, or both; and automatically generate a signature based on the extracted meta information; and a memory coupled to the processor and configured to provide the processor with instructions.