<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE ArticleSet PUBLIC "-//NLM//DTD PubMed 2.7//EN" "https://dtd.nlm.nih.gov/ncbi/pubmed/in/PubMed.dtd">
<ArticleSet>
<Article>
<Journal>
				<PublisherName>Iranian Society of Cryptology</PublisherName>
				<JournalTitle>The ISC International Journal of Information Security</JournalTitle>
				<Issn>2008-2045</Issn>
				<Volume></Volume>
				<Issue>Articles in Press</Issue>
				<PubDate PubStatus="epublish">
					<Year>2026</Year>
					<Month>02</Month>
					<Day>22</Day>
				</PubDate>
			</Journal>
<ArticleTitle>Static Malware Detection in Windows Executables Using Deep Neural Networks and Custom Binary Features</ArticleTitle>
<VernacularTitle></VernacularTitle>
			<FirstPage></FirstPage>
			<LastPage></LastPage>
			<ELocationID EIdType="pii">241272</ELocationID>
			
<ELocationID EIdType="doi">10.22042/isecure.2026.241272</ELocationID>
			
			<Language>EN</Language>
<AuthorList>
<Author>
					<FirstName>Sajjad</FirstName>
					<LastName>Rezaei</LastName>
<Affiliation>Department of Computer Engineering, Isfahan University of Technology, Isfahan, Iran.</Affiliation>

</Author>
<Author>
					<FirstName>Ali</FirstName>
					<LastName>Fanian</LastName>
<Affiliation>Department of Computer Engineering, Isfahan University of Technology, Isfahan, Iran.</Affiliation>

</Author>
</AuthorList>
				<PublicationType>Journal Article</PublicationType>
		<Abstract>The extensive use of malware targeting Windows systems, particularly through Portable Executable (PE) files, has prompted significant research into malware detection. Although many approaches have been proposed, the increasing complexity and evasiveness of modern malware continue to present substantial challenges, underscoring the need for further advancements in detection strategies. This paper introduces a static malware detection framework based on deep learning and a set of carefully engineered binary features extracted directly from raw PE files. In contrast to conventional methods that rely on metadata or dynamic analysis, our approach performs detailed parsing of file headers, section layouts, entropy levels, import/export tables, and embedded resources to form a comprehensive feature set. A deep neural network is trained on these features, with its architecture and hyperparameters fine-tuned using Bayesian optimisation. The model is evaluated on a balanced dataset of benign and malicious PE files, achieving high accuracy (98.83%) and an F1-score of 98.95%. Fully automated and independent of dynamic execution or commercial tools, the proposed solution is well-suited for deployment in real-world applications such as antivirus systems and intrusion detection platforms. </Abstract>
		<ObjectList>
			<Object Type="keyword">
			<Param Name="value">Binary Feature Extraction</Param>
			</Object>
			<Object Type="keyword">
			<Param Name="value">Deep Neural Network</Param>
			</Object>
			<Object Type="keyword">
			<Param Name="value">Malware Classification</Param>
			</Object>
			<Object Type="keyword">
			<Param Name="value">Portable Executable Files</Param>
			</Object>
			<Object Type="keyword">
			<Param Name="value">Static analysis</Param>
			</Object>
		</ObjectList>
<ArchiveCopySource DocType="pdf">https://www.isecure-journal.com/article_241272_04f45db24e6721a93f7b35246833f2fa.pdf</ArchiveCopySource>
</Article>
</ArticleSet>
