PortEx

PortEx 欢迎使用 PortEx PortEx 是一个用于便携可执行文件静态恶意软件分析的 Java 库。其重点在于 PE 文件格式的鲁棒性及异常检测。 PortEx 使用 Java 和 Scala 编写，面向 Java 应用程序。 功能特性 读取头部信息：MSDOS 头、COFF 文件头、可选头、节表 读取 PE 结构：导入表、资源、导出表、调试目录、重定位表、延迟加载导入表、绑定导入表 导出节、资源、覆盖数据、嵌入的 ZIP、JAR 或 .class 文件 扫描文件格式异常，包括结构异常、已弃用、保留、错误或非默认值。 可视化 PE 文件结构、局部熵和字节图，支持可变颜色和大小...

PortEx - Java Library To Analyse Portable Executable Files With A Special Focus On Malware Analysis And PE Malformation Robustness

PortEx is a Java library for static malware analysis of Portable Executable files. Its focus is on PE malformation robustness, and anomaly detection. PortEx is written in Java and Scala, and targeted at Java applications. Features Reading header information from: MSDOS Header, COFF File Header,...

PortEx - Java library to analyse Portable Executable files with a special focus on malware analysis and PE malformation robustness

PortEx is a Java library for static malware analysis of Portable Executable files. Its focus is on PE malformation robustness, and anomaly detection. PortEx is written in Java and Scala, and targeted at Java applications. Features Reading header information from: MSDOS Header, COFF File Header,...

PE Static Malware Analysis: PortEx

PortEx is a Java library for static malware analysis of portable executable files. Its focus is on PE malformation robustness and anomaly detection. PortEx is written in Java and Scala, and targeted at Java applications. Features Reading Header information from: MSDOS Header, COFF File Header,...