/funcspy

A malware static analysis tool to quickly identify suspicious functions loaded from DLLs.

Primary LanguagePythonMIT LicenseMIT

funcspy

A simple malware static analysis tool to quickly identify suspicious functions loaded from DLLs.

NOTE: Based off the database from malapi.io

Usage: python funcspy.py <path/to/malware>

funcspy

Requires: pip install pefile colorama