When I research the ransomware detection with adversarial examples, I extracted the dataset from the strings based on cuckoo dynamic analysis. Those datasets are based on the count of each string. So I generated the adversarial examples based on those datasets, while not binary.
When it comes to this question, I am not sure whether it is necessary or I was in the wrong direction.
For adversarial images examples, it is easy to just change one pixel. But for malware/ransomware binary, how to achieve that part?