pefile

pefile pefile ist ein plattformunabhängiges Python-Modul zum Parsen und Arbeiten mit Portable Executable PE Dateien. Der Großteil der in den PE-Datei-Headern enthaltenen Informationen sowie alle Details und Daten der Abschnitte sind zugänglich...

pecli

PEcli Tool zur Analyse von PE-Dateien in Python 3. Aktuelle Funktionen: Informationen über die Datei anzeigen Importe, Exporte, Ressourcen Nach interessanten Informationen in der Datei suchen abnormale Ressourcen, PEiD usw. Sektionen oder Ressourcen dumpen Größe prüfen Nach einem String in der...

SSMA

SSMA SSMA is a simple malware analyzer written in Python 3. Features: Analyze PE file's header and sections number of sections, entropy of sections/PE file, suspicious section names, suspicious flags in the characteristics of the PE file, etc. Analyze ELF file for Linux malware analysis, it uses...

pftriage

pftriage pftriage é uma ferramenta para ajudar a analisar arquivos durante a triagem de malware. Permite que um analista visualize e extraia rapidamente as propriedades de um arquivo para auxiliar no processo de triagem. A ferramenta também possui uma função de análise que pode detectar indicador...

MalScan - A Simple PE File Heuristics Scanners

MalScan is a simple PE File Heuristics Scanners written in python that you can use to quickly analyze a PE file and find out whether anything suspicious exists. It is a simple tool so doesn't offers much fancy features. You are free to extend it or do whatever you want with it. Things Supported...

[REMnux] A Linux Distribution for Malware Analysis

REMnux incorporates a number of tools for analyzing malicious executables that run on Microsoft Windows, as well as browser-based malware, such as Flash programs and obfuscated JavaScript. This popular toolkit includes programs for analyzing malicious documents, such PDF files, and utilities for...