Two techniques for detecting packed portable executable files

Various techniques have been recently proposed to evade static detection of packed portable executable files. In this paper, two such evasion techniques are examined, their limitations are illustrated, and we describe two methods of detection which overcome these evasion techniques. We argue that these methods of detection are not easily evaded.