n1ght-w0lf / UchihashLinks
A small utility to deal with malware embedded hashes.
☆53Updated 2 years ago
Alternatives and similar repositories for Uchihash
Users that are interested in Uchihash are comparing it to the libraries listed below
Sorting:
- Scripts, Yara rules and other files developed during malware investigations☆26Updated 3 years ago
- Malware Configuration Extraction Modules☆51Updated 2 years ago
- Malware Muncher is a proof-of-concept Python script that utilizes the Frida framework for binary instrumentation and API hooking, enablin…☆45Updated 2 years ago
- Unpacking and decryption tools for the Emotet malware☆45Updated 4 years ago
- Sentello is python script that simulates the anti-evasion and anti-analysis techniques used by malware.☆75Updated 4 years ago
- ☆22Updated last year
- ☆75Updated 2 years ago
- A Feature Rich Modular Malware Configuration Extraction Utility for MalDuck☆130Updated 2 years ago
- Various code samples and useful tips and tricks from reverse engineering and malware analysis fields.☆106Updated 7 months ago
- My Malware Analysis Reports☆24Updated 3 years ago
- Royal Road RTF Weaponizer object decoder☆24Updated last year
- Lazarus analysis tools and research report☆57Updated 2 years ago
- ☆23Updated 5 years ago
- Capa analysis importer for Ghidra.☆63Updated 5 years ago
- Go Lang Portable Executable Parser☆39Updated 4 years ago
- A powershell parser for https://github.com/ufrisk/MemProcFS☆45Updated 4 years ago
- ☆14Updated 3 years ago
- VBScript & VBA source-to-source deobfuscator with partial-evaluation☆80Updated last year
- Imphash-like calculation on Golang binaries☆49Updated 3 years ago
- The following repository contains a modified version of SUNBURST with cracekd hashes, comments and annotations.☆56Updated 5 years ago
- Python wrappers for mal_unpack☆37Updated 2 years ago
- GarbageMan is a set of tools for analyzing .NET binaries through heap analysis.☆118Updated 2 years ago
- TrashDBG the world's worse debugger☆23Updated 3 years ago
- Signature-based detection of malware features based on Windows API call sequences. It's like YARA for sandbox API traces!☆82Updated 2 years ago
- 100 Days of YARA to be updated with rules & ideas as the year progresses☆60Updated 2 years ago
- A collection of shellcode hashes☆17Updated 7 years ago
- A repository where I share my injection implemintations☆29Updated 5 years ago
- Tool to decrypt the configuration of NanoCore and dump all used plugins☆11Updated 5 years ago
- Scripts to aid analysis of files obfuscated with ScatterBee.☆24Updated 3 years ago
- ☆15Updated 4 years ago