OALabs / StrAnnotate-IDA

Simple string annotation plugin for IDA

StrAnnotate IDA Plugin

A simple way to annotate your IDB with externally decrypted strings tables. A few lines of python to make a tedious task into a click.

Installing StrAnnotate

Simply copy the latest release of strannotate.py into your IDA plugins directory and you are ready to start annotating!

Strings Table JSON Format

The strings table must use the following specific JSON format.

{
"strings":[
            { 
              "offset":<file offset>, 
              "value":<ascii string>
            }, ...
          ]
}

UnpacMe Strings Tables

StrAnnotate can accept any generated strings table as long as it follows the defined JSON format, but UnpacMe config strings data is specifically designed to work with StrAnnotate.

The plugin will work with both a strings table (ex. QakBot) and with inline strings (ex. RaccoonStealer).

Simply download the strings table from UnpacMe and use StrAnnotate to import the strings into your IDB!

❗Compatibility Issues

The StrAnnotate plugin has been developed for use with the IDA 7+ and Python 3 it is not backwards compatible.