SuperPeHasher
SuperPEHasher is a wrapper written in Python3 for several hash algorithms dedicated to PE file. It includes the following:
- MD5, SHA2
- SSDEEP
- PeHash
- Import Hash
- Import Fuzzy
- Rich PE Hash
- Machoc Hash
- Dhash icon
Getting Started
if you want more information about hashing algorithms you can visit the blog I wrote on Medium.
Installing
To run this tool you can git clone and install the requirements.
pip install -r requirements.txt
or
pip install superpehasher
Running the test
Once you installed the requirements you can run the file pehasher.py with a file as input.
python pehasher.py sample.exe
md5: 60b7c0fead45f2066e5b805a91f4f0fc
sha1: 9018a7d6cdbe859a430e8794e73381f77c840be0
sha256: 80c10ee5f21f92f89cbc293a59d2fd4c01c7958aacad15642558db700943fa22
sha512: 68b9f9c00fc64df946684ce81a72a2624f0fc07e07c0c8b3db2fae8c9c0415bd1b4a03ad7ffa96985af0cc5e0410f6c5e29a30200efff21ab4b01369a3c59b58
ssdeep: 6144:Jv7Wc4dyC7dXNBzn68YoC+6VoQSkgrpZHqk61peBN1L+I8pfezYeWHMzyy14pL1k:JvSbJxPRC+XQSxb6Dc7RwIWHeGL7GOK
ImpHash: f93b5d76132f6e6068946ec238813ce1
ImpFuzzy: 192:q9AW2Rpn8RrMqkNsQYDhs4kqp1qAw5tXLXVn/zgF79KPrzJ:qcp8lUNlc11qAw5tXLXV/zm79KP5
RicHash xored: f0eaf48df96ec9b2f3ae6d616be68b3d
RicHash clear: e169b9c125be3598b84b8651d3f5ff91
PeHash: fa5ad3991616af0bb9d76132db7e9d6009c55baa
Machoc Hash: 5ed7c76d41a02300e08e7177411a02300ead543fa0d346c2ed4ac25a954ac25a951a02300e1a02300e000039423f2825315453253154531a02300e253154532531545325315453[Truncated]
Icon dhash: 5050d270cccc82ae