RE FORUM

[REVERSE ENGINEERING] => Off topic => Topic started by: DARKER on May 10, 2016, 06:59:53 AM

Title: Manalyzer
Post by: DARKER on May 10, 2016, 06:59:53 AM
Manalyzer is a free service which performs static analysis on PE executables to detect undesirable behavior.
Try it online, or check out the underlying software on GitHub!

It is a robust parser for PE files with a flexible plugin architecture which allows users to statically analyze files in-depth. Manalyze...

    Identifies a PE's compiler
    Detects packed executables
    Applies ClamAV signatures
    Searches for suspicious strings
    Looks for malicious import combinations (i.e. WriteProcessMemory + CreateRemoteThread)
    Detects cryptographic constants (just like IDA's findcrypt plugin)
    Can submit hashes to VirusTotal
    Verifies authenticode signatures (on Windows only)

https://manalyzer.org/