{
  "namespace": "maec-malware-obfuscation-methods",
  "description": "Obfuscation methods used by malware based on MAEC 5.0",
  "version": 1,
  "predicates": [
    {
      "value": "maec-obfuscation-methods",
      "expanded": "MAEC Obfuscation methods",
      "uuid": "2e8d476c-3039-5ac6-a593-81c4a82dc774"
    }
  ],
  "values": [
    {
      "predicate": "maec-obfuscation-methods",
      "entry": [
        {
          "value": "packing",
          "expanded": "packing",
          "uuid": "09ef6cef-bb30-54db-a908-b97756715842"
        },
        {
          "value": "code-encryption",
          "expanded": "code-encryption",
          "uuid": "c5ea6984-f3ef-5049-ace8-fdb3556dfe41"
        },
        {
          "value": "dead-code-insertion",
          "expanded": "dead-code-insertion",
          "uuid": "a53a8aeb-f836-5fe4-a3db-5a5d27109b1e"
        },
        {
          "value": "entry-point-obfuscation",
          "expanded": "entry-point-obfuscation",
          "uuid": "41e42c93-7a08-5196-9ce3-247160181cdf"
        },
        {
          "value": "import-address-table-obfuscation",
          "expanded": "import-address-table-obfuscation",
          "uuid": "27fb427e-b2c9-55f7-90be-8d44eee0cf78"
        },
        {
          "value": "interleaving-code",
          "expanded": "interleaving-code",
          "uuid": "f000414b-8c46-5fc8-9755-d4b31dd5709e"
        },
        {
          "value": "symbolic-obfuscation",
          "expanded": "symbolic-obfuscation",
          "uuid": "016c8d6f-4feb-5fdf-9f28-0bbaf100e139"
        },
        {
          "value": "string-obfuscation",
          "expanded": "string-obfuscation",
          "uuid": "b31dc873-302d-5323-a329-58f8c6141363"
        },
        {
          "value": "subroutine-reordering",
          "expanded": "subroutine-reordering",
          "uuid": "db10f968-f119-5296-bcdd-9fe08796b2f9"
        },
        {
          "value": "code-transposition",
          "expanded": "code-transposition",
          "uuid": "9b51f2ee-d0c0-5d1d-b49b-2f58abc799cb"
        },
        {
          "value": "instruction-substitution",
          "expanded": "instruction-substitution",
          "uuid": "16c878a7-6d95-5853-b740-8e3871f5f53d"
        },
        {
          "value": "register-reassignment",
          "expanded": "register-reassignment",
          "uuid": "cbf0b9c9-98d5-57ed-aa87-a3d920fcf291"
        }
      ]
    }
  ],
  "uuid": "2a0c959f-2a45-5475-9c2c-d0de3be62df4"
}