cysinfo / Exescan
ExeScan is the FREE console based tool to detect anomalies in PE (Portable Executable) files. It quickly scans given executable file and detect all kind of anomalies in its PE header fields including checksum verifications, size of various header fields, improper size of raw data, non-ascii/empty section names etc. Various packers/protectors mo…
☆20Updated 5 years ago
Related projects ⓘ
Alternatives and complementary repositories for Exescan
- Analysis PE file or Shellcode☆48Updated 8 years ago
- Malware.lu configuration extractor☆24Updated 10 years ago
- Mal Tindex is an Open Source tool for indexing binaries and help attributing malware campaigns☆66Updated 7 years ago
- a collection of yara rules for binary analysis☆24Updated 7 years ago
- Modified edition of cuckoo community modules☆31Updated 5 years ago
- ☆41Updated 6 years ago
- A Python library to interface with a cuckoo-modified instance☆21Updated 8 years ago
- Test suite for bypassing Malware sandboxes.☆38Updated 10 years ago
- Automatically exported from code.google.com/p/malware-lu☆55Updated 5 years ago
- a collection of public yara rules☆26Updated 5 years ago
- Anti-technique Codes, Detection of Anti-technique codes☆37Updated 11 years ago
- Modified edition of cuckoomon☆48Updated 6 years ago
- Static and automated/dynamic malware analysis☆46Updated 9 years ago
- Work Fast With the pattern matching swiss knife for malware researchers.☆35Updated 8 years ago
- library to decode/parse zeus-like configuration files☆29Updated 6 years ago
- Imports MSDN documentation into IDA Pro☆51Updated 12 years ago
- Malware analyses and helpful scripts☆29Updated 2 years ago
- Transfer EIP control to shellcode during malware analysis investigation☆73Updated 10 years ago
- ☆27Updated 2 years ago
- A set of scripts for a radare-based malware code analysis workflow☆67Updated 5 years ago
- A Volatility plugin for finding sqlite database rows☆22Updated 5 years ago
- ☆68Updated 7 years ago
- Membrane: A Posteriori Detection of Malicious Code Loading by Memory Paging Analysis☆42Updated 8 years ago
- ☆43Updated 6 years ago
- Yet another Python library to read and write PE/PE+ files.☆80Updated 8 years ago
- Volatility Framework plugin to detect various types of hooks as performed by banking Trojans☆40Updated 5 years ago
- ☆26Updated 10 years ago
- Collection of my Python Scripts