File signatures are mathematically generated hashes for a file They are the first step to analyzing malware. Good at Detecting malware already known to be malicious Flagging malicious software for other users Opposition Polymorphic Malware Signature Spoofing Hasing Algorithms YARA (Malware Signatures) SHA256 (Files) MD5 (Images)