Computer Virus Identifying Information Extraction System, Computer Virus Identifying Information Extraction Method, and Computer Virus Identifying Information Extraction Program

摘要

To enable quick extraction of computer virus identifying information.;A server 100 identifies an “Import Table” etc. of a header item of a specific region predetermined as a storage region of information able to be deemed as identifying in an exec file identified as a computer virus as a region of a signature item, reads out the content of the “Import Table” etc., and extracts it as a signature. Further, the server 100 combines a plurality of signatures to extract a new signature.