「ANALYSIS-AND-TROUBLESHOOTING」- 其他分析工具

YARA (for Malware Researchers)

YARA – The pattern matching swiss knife for malware researchers

YARA is a tool aimed at (but not limited to) helping malware researchers to identify and classify malware samples. With YARA you can create descriptions of malware families (or whatever you want to describe) based on textual or binary patterns. Each description, a.k.a rule, consists of a set of strings and a boolean expression which determine its logic.

edb and edb-debugger

eteran/edb-debugger: edb is a cross-platform AArch32/x86/x86-64 debugger.

edb is a cross platform AArch32/x86/x86-64 debugger. It was inspired by Ollydbg, but aims to function on AArch32, x86, and x86-64 as well as multiple OS’s. Linux is the only officially supported platform at the moment, but FreeBSD, OpenBSD, OSX and Windows ports are underway with varying degrees of functionality.

distorm (Powerful Disassembler Library For x86/AMD64)

gdabah/distorm: Powerful Disassembler Library For x86/AMD64

FLASM

no|wrap.de – Flasm

FLASM is a tool that is capable of decompressing and disassembling SWF files. It can be downloaded from http://nowrap.de/flasm.html