Dr. Anna Malina

• Design, develop and maintain antimalware engines for Acronis Cyber Protect products (C++ ) • Develop cross-platform and highly efficient code • Design and participate in implementation of automated tests • Suggest new features, algorithms and tools to grow component maturity level

• Writing C/C++ code for extracting useful features from file formats for ML detections (e.g. implemented a parser for Autohotkey scripts located in PE to extract AHK language constructions - function calls, variables, strings, etc., this included lexical and syntactic AHK script analysis and AST building) • Research of different methods used by malware (e.g. implemented injection PoC tool with more then 30 methods of injection) • Working on designing and implementing behavior detection framework (C++)

• Dynamic and static analysis of malware samples • Creation of heuristic detections • Writing C/C ++ platform-independent code: 1) for parsing file formats, unpacking, decrypting, deobfuscating, extracting data from archives and installers (like Inno, NSIS, etc.), extracting data for detection (e.g. packer watermarks, different PE features for ML) 2) for curing infected files 3) code for maintaining/fixing/adding new functionality for internal components and services like: AV databases/scan engine/sandbox

• Dynamic and static analysis of samples: PE (including .NET, Delphi, Visual Basic, Bat2Exe, Python2Exe, AutoitToExe, Inno, NSIS), Linux executable files, scripts and documents (VBS, Autoit, JavaScript, PowerShell, Python, rtf, pdf, ole2, java, swf, etc.) • Creation of signatures and detection rules • Development of software tools and services for malware analysis and detection automation - e.g. for developing internal sandbox for analyzing samples at Hypervisor level (using C/C++, python, perl, php, asm)

PHD (Candidate of Technical Sciences) - The work is devoted to methods of mathematical models reduction and high order polynomial matrix inversion