{"id":3116,"date":"2011-05-23T12:27:19","date_gmt":"2011-05-23T11:27:19","guid":{"rendered":"https:\/\/www.darknet.org.uk\/?p=3116"},"modified":"2011-05-23T12:27:19","modified_gmt":"2011-05-23T11:27:19","slug":"malware-analyser-v3-0-a-static-dynamic-malware-analysis-tool","status":"publish","type":"post","link":"https:\/\/www.darknet.org.uk\/2011\/05\/malware-analyser-v3-0-a-static-dynamic-malware-analysis-tool\/","title":{"rendered":"Malware Analyser v3.0 &#8211; A Static &#038; Dynamic Malware Analysis Tool"},"content":{"rendered":"<p>Malware Analyser is freeware tool to perform static and dynamic analysis on malware executables, it can be used to identify potential traces of anti-debug, keyboard hooks, system hooks and DEP setting change calls in the malware.<\/p>\n<p>This is a stepping release since for the first time the Dynamic Analysis has been included for file creations (will be improved for other network\/registry indicators sooner) along with process dumping feature.<\/p>\n<p><strong>Features<\/strong><\/p>\n<ul>\n<li>\nString based analysis for registry, API calls, IRC Commands, DLL&#8217;s called and VM Aware.<\/li>\n<li>Display detailed headers of PE with all its section details, import and export symbols etc.<\/li>\n<li>On Distro, can perform an ascii dump of the PE along with other options (check &#8211;help argument).<\/li>\n<li>\nFor Windows, it can generate various section of a PE : DOS Header, DOS Stub, PE File Header, Image Optional Header, Section Table, Data Directories, Sections<\/li>\n<li>ASCII dump on windows machine<\/li>\n<li>Code Analysis (disassembling)<\/li>\n<li>Online malware checking (<a href=\"http:\/\/www.virustotal.com\">http:\/\/www.virustotal.com<\/a>)<\/li>\n<li>Check for Packer from the Database.<\/li>\n<li>Tracer functionality<\/li>\n<li>Signature Creation: Allows to create signature of malware<\/li>\n<li>CRC and Timestamp verification.<\/li>\n<li>Entropy based scan to identify malicious sections.<\/li>\n<li>Dump a process memory<\/li>\n<li>Dynamic Analysis (Still in beginning stage) for file creations.<\/li>\n<\/ul>\n<p>You can download Malware Analyser v3.0 here:<\/p>\n<p><a href=\"http:\/\/www.malwareanalyser.com\/home\/malware_analyser%203.0.zip\">malware_analyser 3.0.zip<\/a><\/p>\n<p>Or read more <a href=\"http:\/\/www.malwareanalyser.com\/\">here<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Malware Analyser is freeware tool to perform static and dynamic analysis on malware executables, it can be used to identify potential traces of anti-debug, keyboard hooks, system hooks and DEP setting change calls in the malware. This is a stepping release since for the first time the Dynamic Analysis has been included for file creations [&hellip;]<\/p>\n","protected":false},"author":25,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_seopress_robots_primary_cat":"","_seopress_titles_title":"","_seopress_titles_desc":"","_seopress_robots_index":"","_genesis_hide_title":false,"_genesis_hide_breadcrumbs":false,"_genesis_hide_singular_image":false,"_genesis_hide_footer_widgets":false,"_genesis_custom_body_class":"","_genesis_custom_post_class":"","_genesis_layout":"","footnotes":""},"categories":[12,28,7,29],"tags":[831,6719,5627],"featured_image_src":null,"featured_image_src_square":null,"author_info":{"display_name":"Darknet","author_link":"https:\/\/www.darknet.org.uk\/author\/darknet\/"},"_links":{"self":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts\/3116"}],"collection":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/users\/25"}],"replies":[{"embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/comments?post=3116"}],"version-history":[{"count":0,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts\/3116\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/media?parent=3116"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/categories?post=3116"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/tags?post=3116"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}