peframe

======= peframe peframe is a open source tool to perform static analysis on Portable Executable malware and generic suspicious file. It can help malware researchers to detect packer, xor, digital signature, mutex, anti debug, anti virtual machine, suspicious sections and functions, macro and much...

ZeroScout

🦅 ZeroScout Otonom Yerel & Bulut Tehdit Avcısı "Sadece dosya taramayın. Savaş alanını görselleştirin." 🇺🇸 İngilizce Dökümantasyon İçin Tıklayın Read in English 🚀 ZeroScout Nedir? ZeroScout , Olay Müdahale Uzmanları DFIR, SOC Analistleri ve Zararlı Yazılım Araştırmacıları için tasarlanmış yeni nesi...

gimphash

gimphash gimphash هي طريقة مقترحة لحساب ما يعادل imphash لملفات Go الثنائية. اسمها اختصار لـ G o-imp ort-hash. تحتوي ملفات Golang الثنائية على تبعياتها كجزء من الملف التنفيذي. تتضمن هذه التبعيات كلاً من حزم المكتبة القياسية والتبعيات الخارجية، ويمكن استخدامها، بشكل مماثل لـ imphash التقليدي، لتحد...

YARA webinar follow up

If you read my previous blogpost Hunting APTs with YARA then you probably know about the webinar we conducted on March 31, 2020, showcasing some of our experience in developing and using YARA rules for malware hunting. In case you missed the webinar - or if you attended and want to re-watch it -...

Munin - Online Hash Checker For Virustotal And Other Services

Munin is a online hash checker utility that retrieves valuable information from various online sources The current version of Munin queries the following services: Virustotal Malshare HybridAnalysis Note: Munin is based on the script "VT-Checker", which has been maintained in the LOKI repository...