hasherezade
★ 3,942pe-sieve
Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).
HYSEN LABS DIRECTORY
Verified repositories, classifications and analysis from the hasherezade organization.
Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).
Portable Executable reversing tool with a friendly GUI
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
A Pin Tool for tracing API calls etc
A library to load, manipulate, dump PE files. See also: https://github.com/hasherezade/libpeconv_tpl
Dynamic unpacker based on PE-sieve