1. A method performed on a device for detecting whether a file includes malware, the method comprising: extracting static information of at least two predetermined items in the file; creating a genetic map for the file by altering the extracted information into a previously set format; comparing the created genetic map with a previously stored malware genetic map to obtain a similarity between the created genetic map and the previously stored malware genetic map; and determining that the file includes malware when the similarity is higher than a reference value.