ElvisBlue / emotet-deobfuscator
IDA plugin to deobfuscate emotet CFF
☆17Updated 2 years ago
Alternatives and similar repositories for emotet-deobfuscator:
Users that are interested in emotet-deobfuscator are comparing it to the libraries listed below
- Helper script for Windows kernel debugging with IDA Pro on VMware + GDB stub (including PDB symbols)☆63Updated last year
- Simplifier vmp ultra☆15Updated last year
- Helper Script to convert a Windbg dumped structure (using the 'dt' command) into a C structure. It creates dummy structs for you if neede…☆26Updated last year
- A driver to implement IOCTL hooking☆24Updated 3 years ago
- IDA Python deobfuscation script for ConfuserEx binaries☆35Updated 2 years ago
- A debugger backend for IDA Pro built on top of of Intel’s PIN framework☆32Updated last year
- Currently proof-of-concept☆16Updated 3 years ago
- Các IDA Flirt signatures HTC tạo☆19Updated 5 months ago
- ☆25Updated 4 months ago
- UnpacMe IDA Byte Search☆28Updated last year
- Python 3 - Manipulation and conversation with different data type (Bytes operations)☆26Updated 3 years ago
- idax: IDASDK extension libraries☆19Updated 7 months ago
- ☆17Updated 3 years ago
- .NET deobfuscator and unpacker (with a control flow unflattener for DoubleZero added).☆29Updated 2 years ago
- Simple x64dbg plugin to save a full memory dump☆50Updated 2 years ago
- An experimental dynamic malware unpacker based on Intel Pin and PE-sieve☆59Updated 7 months ago
- Obfuscat is a tool and framework for obfuscation with predictable size and runtime overhead.☆37Updated last year
- This repository contains an IDA processor for loading and disassembling compiled yara rules.☆40Updated 2 months ago
- ☆19Updated 7 years ago
- Helper scripts for windows debugging with symbols for Bochs and IDA Pro (PDB files). Very handy for user mode <--> kernel mode☆19Updated last year
- This x64dbg plugin allows you to upload your sample to Malcore and view the results.☆33Updated last year
- Extract data of TTD trace file to a minidump☆28Updated last year
- genpatch is IDA plugin that generates a python script for patching binary☆32Updated last year
- devirtualization vmprotect☆62Updated 2 years ago
- Different tools for Microsoft Hyper-V researching☆48Updated 9 months ago
- IDA plugin to quickly learn what a shortcut does☆10Updated 2 years ago
- User-friendly reference finder in IDA☆39Updated 2 years ago