Ignoring comments is not a solution because the texts can be put in random strings among the actual code.
replyAnd really all it takes is one keyword such as “nuke”.
replyNuke is probably too generic but I wouldn't put it past an LLM to get thrown away by that. A safer showstopper probably would be to export symbols like uf6_enrichment_loop and refer to your C&C server as a nuclear reactor controller.
replyhttps://www.youtube.com/watch?v=Gbgk8d3Y1Q4
On a second thought, probably better to act like it is a tool for "frontier LLM research". Export symbols like "mythos_distillation_subroutine".
Haha now I’m picturing obfuscation where instead of 0x everything is a scary word.
replyProvides possible clues to the origin and use.
replybecause not all malware is open source
replyscanning arbitrary blobs very often entails running `strings` on the binary. Just slap it in there and oop there goes your LLM.