Skip to main navigation Skip to search Skip to main content

A Hybrid Machine Learning Model for Windows Malware Detection and Classification

  • Jordan University of Science and Technology

Research output: Chapter in Book/Report/Conference proceedingConference contributionpeer-review

Abstract

This paper proposes a machine-learning model using static and dynamic features to identify Windows malware. The paper uses a new dataset of 12158 Portable Executable PE files for the Windows operating system, 5936 malicious files belonging to nine malware families, and 6,222 benign files. The main features of the files were extracted based on Application Programming Interface (API) by three main known methods: Static using Python, Dynamic by Cuckoo Sandbox, and finally, Hybrid by combining them to check which way is more effective and accurate in detecting malicious files. The proposed model performs binary and multiclass classification to classify malicious files into nine types. The experiments show that Extra-Trees outperformed other classifiers, achieving an accuracy of 100% in binary classification and 97% in multiclass classification.

Original languageEnglish
Title of host publicationICT for Intelligent Systems - Proceedings of ICTIS 2025
EditorsJyoti Choudrie, Eva Tuba, Thinagaran Perumal, Amit Joshi
PublisherSpringer Science and Business Media Deutschland GmbH
Pages167-180
Number of pages14
ISBN (Print)9789819513642
DOIs
StatePublished - 2026
Event10th International Conference on Information and Communication Technology for Intelligent Systems, ICTIS 2025 - New York, United States
Duration: 23 May 202524 May 2025

Publication series

NameSmart Innovation, Systems and Technologies
Volume325 SIST
ISSN (Print)2190-3018
ISSN (Electronic)2190-3026

Conference

Conference10th International Conference on Information and Communication Technology for Intelligent Systems, ICTIS 2025
Country/TerritoryUnited States
CityNew York
Period23/05/2524/05/25

Keywords

  • API calls
  • Dynamic analysis
  • Machine learning
  • Malware detection
  • PE files

Fingerprint

Dive into the research topics of 'A Hybrid Machine Learning Model for Windows Malware Detection and Classification'. Together they form a unique fingerprint.

Cite this