Alternatives and similar repositories for sigcheck:

Users that are interested in sigcheck are comparing it to the libraries listed below

• alexander-hanel / ida_yara
  A python script that can be used to scan data within in an IDB using Yara.
  ☆22Updated 6 years ago
• rwfpl / rewolf-ldrdebug
  Helper utility for debugging windows PE/PE+ loader.
  ☆51Updated 9 years ago
• mrexodia / YaraGen
  Plugin for x64dbg to generate Yara rules from function basic blocks.
  ☆34Updated 7 years ago
• mandiant / unicorn-libemu-shim
  libemu shim layer and win32 environment for Unicorn Engine
  ☆71Updated 7 years ago
• SouhailHammou / IDARay-Plugin
  IDARay is an IDA Pro plugin that matches the database against multiple YARA files which themselves may contain multiple rules.
  ☆18Updated 6 years ago
• Techlord-RCE / VB-Exe-Parser
  VB Exe Parser is an IDA script written in Python. This script will help you to parse VB program internal structures. It can find: Event, …
  ☆16Updated 8 years ago
• apriorit / antirootkit-anti-splicer
  The project is a demo solution for one of the anti-rootkit techniques aimed on overcoming splicers
  ☆34Updated 7 years ago
• mr-tz / idapython
  IDAPython scripts
  ☆15Updated 7 years ago
• RceNinja / Re-Scripts
  ☆33Updated 3 years ago
• evandowning / windbg-trace
  Use WinDBG to trace the Windows API calls of any Portable Executable file
  ☆30Updated 7 years ago
• Winbagility / Winbagility
  [ARCHIVED] mov rax, ${Thalium/IceBox}; jmp rax;
  ☆72Updated 5 years ago
• ohjeongwook / windbgtool
  Windbg Utility Tools based upon PyKD
  ☆42Updated 4 years ago
• Microwave89 / win7-x64-ndk
  Native Development Kit for Vista 64bit And Later, by me, Based on NDK Headers 1.0, by Alex Ionescu
  ☆16Updated 9 years ago
• Necrosys / zerowine-tryout
  Zero Wine Tryouts: An open source malware analysis tool
  ☆16Updated 8 years ago
• AntiRootkit / BDArkit
  just an lite AntiRootkit for interesting
  ☆23Updated 9 years ago
• thalium / idatag
  IDA plugin to explore and browse tags
  ☆53Updated 5 years ago
• owerosu / packerPE32
  Simple PE packer with RtlCompressBuffer
  ☆21Updated 9 years ago
• MortenSchenk / tagWnd-Hardening-Bypass
  Bypass for the hardening against usage of tagWnd as a kernel read/write primitive
  ☆29Updated 7 years ago
• psaneme / Kung-Fu-Malware
  ☆32Updated 6 years ago
• tinysec / runwithdll
  windows create process with a dll load first time via LdrHook
  ☆30Updated 8 years ago
• hasherezade / loaderine
  A demo implementation of a well-known technique used by some malware to evade userland hooking, using my library: libpeconv.
  ☆19Updated 6 years ago
• avast / authenticode-parser
  Authenticode-parser is a simple C library for Authenticode format parsing using OpenSSL.
  ☆16Updated 10 months ago
• allthingsida / climacros
  Create and use macros in IDA's CLIs
  ☆63Updated last year
• secrary / idenLibX
  idenLib (Library Function Identification) plugin for x32dbg
  ☆41Updated 5 years ago
• Nukem9 / VMWareClient
  Reverse engineered vmware workstation code to aid in kernel debugging.
  ☆14Updated 9 years ago
• dcdelia / sniper
  Robust API monitoring system presented in the paper "Designing Robust API Monitoring Solutions" (IEEE TDSC)
  ☆23Updated 3 years ago
• nopper / maltrace
  Maltrace is a simple syscall tracer for Windows implemented through the use of PIN.
  ☆23Updated 11 years ago