pe-sieve

There are 1 repository under pe-sieve topic.

hasherezade / pe-sieve
Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).
anti-malware hooking libpeconv malware-analysis memory-forensics pe-analyzer pe-dumper pe-format pe-sieve process-analyzer scans
Language:C++ 2887
hasherezade / hollows_hunter
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
pe-sieve anti-malware malware-analysis malware-detection memory-forensics
Language:C 1875
hasherezade / mal_unpack
Dynamic unpacker based on PE-sieve
libpeconv malware-analysis malware-unpacker memory-forensics pe-sieve
Language:C 631

hasherezade / pe-sieve