23 May 2011 | 10,218 views

Malware Analyser v3.0 – A Static & Dynamic Malware Analysis Tool

Check For Vulnerabilities with Acunetix

Malware Analyser is freeware tool to perform static and dynamic analysis on malware executables, it can be used to identify potential traces of anti-debug, keyboard hooks, system hooks and DEP setting change calls in the malware.

This is a stepping release since for the first time the Dynamic Analysis has been included for file creations (will be improved for other network/registry indicators sooner) along with process dumping feature.

Features

  • String based analysis for registry, API calls, IRC Commands, DLL’s called and VM Aware.
  • Display detailed headers of PE with all its section details, import and export symbols etc.
  • On Distro, can perform an ascii dump of the PE along with other options (check –help argument).
  • For Windows, it can generate various section of a PE : DOS Header, DOS Stub, PE File Header, Image Optional Header, Section Table, Data Directories, Sections
  • ASCII dump on windows machine
  • Code Analysis (disassembling)
  • Online malware checking (http://www.virustotal.com)
  • Check for Packer from the Database.
  • Tracer functionality
  • Signature Creation: Allows to create signature of malware
  • CRC and Timestamp verification.
  • Entropy based scan to identify malicious sections.
  • Dump a process memory
  • Dynamic Analysis (Still in beginning stage) for file creations.

You can download Malware Analyser v3.0 here:

malware_analyser 3.0.zip

Or read more here.



Recent in Countermeasures:
- isowall – Completely Isolate A Device From The Local Network
- ThreadFix – Vulnerability Aggregation & Management System
- StegExpose – Steganalysis Tool For Detecting Steganography In Images

Related Posts:
- Hook Analyser 3.1 – Malware Analysis Tool
- Viruses & Malware Monitored on a Dynamic World Map
- NSDECODER – Automated Website Malware Detection Tool

Most Read in Countermeasures:
- AJAX: Is your application secure enough? - 119,243 views
- Password Hasher Firefox Extension - 117,082 views
- NDR or Backscatter Spam – How Non Delivery Reports Become a Nuisance - 57,572 views

Low-cost VPS Hosting

One Response to “Malware Analyser v3.0 – A Static & Dynamic Malware Analysis Tool”

  1. jim Jones 24 May 2011 at 1:03 am Permalink

    Can I use it kernel32.dll?