/Malware-Analysis-Reports

My Malware Analysis Reports

Primary LanguagePythonGNU General Public License v3.0GPL-3.0

  • In the folders you can read my reports
  • CAPEv2Setup contains an easy explanation on how to setup an automatic sandbox for Malware Analysis
  • IAT_Auto_Label is a plugin for IDA Pro, which helps you applying the dynamically resolved imports (dumped with another program) automatically
  • IDA_Preview_Function_Capabilities is another plugin which iterates through the functions to obtain a preview of the function capabilities based on the calls
  • WSHRAT_Deobfuscate is a script to automatically deobfuscate a bit a sample of WSHRAT
  • conti_string_decoding is a script to decode the strings encoded in the Conti Ransomware Family
  • spora_pseudo_code_explanation is a plain explanation on the encryption process of the Spora Ransomware Family based on the explanation of GDATA