File signatures are mathematically generated hashes for a file They are the first step to analyzing malware.
Good at
- Detecting malware already known to be malicious
- Flagging malicious software for other users
Opposition
Hasing Algorithms
- YARA (Malware Signatures)
- SHA256 (Files)
- SHA1 (Files)
- Message Digest Algorithm 5 (Images)