MalScan

MalScan is a simple PE File Heuristics Scanners written in python that you can use to quickly analyze a PE file and find out whether anything suspicious exists. It is a simple tool so doesn’t offer many fancy features. You are free to extend it or do whatever you want with it.

Things Supported

• Information About file such as MD5, SHA1, Timestamp
• PEiD Signature Check
• Custom Yara Rules Integration
• Section, Imports, Exports, Resources and TLS Callbacks Overview
• Provides some custom heuristics 🙂

Installing

You need to have Python 2.7 installed on your machine. The additional requirement is yara-python.

git clone https://github.com/Ice3man543/MalScan.git

Usage

Simply run with the name of a file you want to check.

Copyright (c) 2018, Nizamul Rana
All rights reserved.

Source: https://github.com/Ice3man543/