コード例 #1
0
ファイル: main.py プロジェクト: HerbDavisY2K/malwareHunter
def static(filename):
       	print "Use <strings> to show strings in the file"
        print "Use <peid> to detect packer signatures"
        print "Use <antidbg> to detect antidebug techniques in the file"
        print "Use <antivm> to detect anti virtualisation techniques in the file"
        print "Use <auto> to auto-analysis the file"
	while True:
               input = raw_input('Static>> ')
               if (input=="strings"):
                    peframe.analyse(filename,"--strings")
               elif (input=="peid"):
                    peframe.analyse(filename,"--peid")
               elif (input=='auto'):
                    peframe.autoanalysis(filename)
	       elif (input=='exit'):
		    return
コード例 #2
0
ファイル: main.py プロジェクト: 0day1day/malwareHunter
readline.parse_and_bind('tab: complete')
filename="/home/ask3m/malware.exe"
filename = raw_input('path to file exemple(/home/ask3m/malware.exe):')
while(1):
       try:
          input = raw_input('Hunter>> ')
          #input =input.replace(' ','')
          if (input=="static"):
               print "Use <strings> to show strings in the file"
               print "Use <peid> to detect packer signatures"
               print "Use <antidbg> to detect antidebug techniques in the file"
               print "Use <antivm> to detect anti virtualisation techniques in the file"
               print "Use <auto> to auto-analysis the file"
               input = raw_input('static>> ')
               if (input=="strings"):
                    peframe.analyse("/home/ask3m/malware.exe","--strings")
               elif (input=="static"):
                    #peframe.autoanalysis("/home/ask3m/malware.exe")
                    peframe.analyse("/home/ask3m/malware.exe","--peid")
                    print input
               elif (input=='auto'):
                    peframe.autoanalysis("/home/ask3m/malware.exe")
          elif (input=="sandbox"):
                print "Dynamic analysis for suspicious files"
                myvbox.myvbox("/home/ask3m/test.exe")
          elif (input=='exit()'):
               sys.exit(0)
          else :
               print "this command is not used"
       except KeyboardInterrupt:
               print "type exit() to stop"