PonyPC / myaut_contrib
mod to myaut2exe decompiler
☆13Updated 7 years ago
Alternatives and similar repositories for myaut_contrib:
Users that are interested in myaut_contrib are comparing it to the libraries listed below
- TA505 unpacker Python 2.7☆47Updated 4 years ago
- ConventionEngine - A Yara Rulepack for PDB Path Hunting☆38Updated 2 years ago
- A collection of my public YARA signatures for various malware families☆29Updated 6 months ago
- MWDB exercises☆19Updated 2 months ago
- Python based CLI for MalwareBazaar☆36Updated 4 months ago
- Ursnif beacon decryptor☆27Updated 2 years ago
- Generate YARA rules for OOXML documents.☆38Updated last year
- Steezy - Ghetto Yara Generation☆15Updated last year
- ☆15Updated 2 years ago
- Parses the WMI object database....looking for persistence☆31Updated 5 years ago
- Malware Configuration Extraction Modules☆49Updated last year
- Capa analysis importer for Ghidra.☆61Updated 4 years ago
- Handy scripts to speed up malware analysis☆35Updated last year
- Yara rules for quick reverse engineering of malware.☆19Updated 9 years ago
- BinSequencer is a script designed to find a common pattern of bytes within a set of samples and generate a YARA rule from the identified…☆76Updated 3 years ago
- Scripts, Yara rules and other files developed during malware investigations☆25Updated 2 years ago
- Links to malware-related YARA rules☆15Updated 2 years ago
- Psinfo is a Volatility plugin which collects the process related information from the VAD (Virtual Address Descriptor) and PEB (Process E…☆36Updated 8 years ago
- Transfer EIP control to shellcode during malware analysis investigation☆75Updated 10 years ago
- Extract BITS jobs from QMGR queue and store them as CSV records☆75Updated last month
- Generate a Yara rule to find base64-encoded files containg a specific keyword☆40Updated 6 years ago
- 100 Days of YARA to be updated with rules & ideas as the year progresses☆58Updated 2 years ago
- runsc loads 32/64 bit shellcode (depending on how runsc is compiled) in a way that makes it easy to load in a debugger. This code is base…☆36Updated 2 years ago
- Just Another broken Registry Parser (JARP)☆16Updated 10 months ago
- ☆22Updated 2 years ago
- ☆33Updated 3 years ago
- Random hunting ordiented yara rules☆95Updated last year
- Scripts and tools accompanying HP Threat Research blog posts and reports.☆50Updated 11 months ago
- Collection of YARA signatures from individual research☆44Updated last year
- VSCode extension for the YARA pattern matching language☆64Updated last year