ganboing malwarecookbook issues

ganboing / malwarecookbook

Automatically exported from code.google.com/p/malwarecookbook

GNU General Public License v3.0

40 stars 22 forks source link

issues

Newest

Newest Most commented Recently updated Oldest Least commented Least recently updated

Patch for /trunk/3/5/capabilities.yara

#50 GoogleCodeExporter opened 9 years ago
0
Seeing lots of [invalid skip in string "$a1"] when running a Yara Scan with ClamAV Converted Signatures

#49 GoogleCodeExporter opened 9 years ago
9
Patch for /trunk/3/8/pescanner.py

#48 GoogleCodeExporter opened 9 years ago
0
peid_to_yara.py

#47 GoogleCodeExporter opened 9 years ago
1
av_multiscan indent error

#46 GoogleCodeExporter closed 9 years ago
1
dbmgr.py has a gramatical error which halts processing

#45 GoogleCodeExporter closed 9 years ago
2
malware plugins not installed with 2.1 alpha

#44 GoogleCodeExporter closed 9 years ago
2
malfind option error

#43 GoogleCodeExporter closed 9 years ago
6
ssdeep_proc.py not showing the results on windows 7 x64 machir

#42 GoogleCodeExporter opened 9 years ago
0
volatility 2.1 alpha && malware2.1_alpha.py trunk psxview command bug

#41 GoogleCodeExporter closed 9 years ago
1
avsubmit.py & VT API 2.0

#40 GoogleCodeExporter opened 9 years ago
0
malware2.1_alpha.py Error

#39 GoogleCodeExporter closed 9 years ago
3
IOError: [Errno 22] Invalid argument when running malfind.py

#38 GoogleCodeExporter closed 9 years ago
3
Add --physical-offset option to psxview to synchronize eprocess offsets

#37 GoogleCodeExporter closed 9 years ago
1
typo in pescanner.py wrt clamscan status code

#36 GoogleCodeExporter closed 9 years ago
1
clamav_to_yara.py creates lots of invalid jumps e.g. [4-4]

#35 GoogleCodeExporter opened 9 years ago
6
issue with impscan

#34 GoogleCodeExporter closed 9 years ago
1
list of apihooks possibly incomplete

#33 GoogleCodeExporter closed 9 years ago
2
list tasks prob with malware.py r94

#32 GoogleCodeExporter closed 9 years ago
1
ApiHooks plugin takes too long time to scan (I think)

#31 GoogleCodeExporter opened 9 years ago
1
move idt_info out of IDT plugin and into general malware space

#30 GoogleCodeExporter closed 9 years ago
1
only create physical address space once in callbacks plugin

#29 GoogleCodeExporter closed 9 years ago
1
add remaining MmProtectToValue flags to malfind

#28 GoogleCodeExporter closed 9 years ago
1
vmauto.py incompatible with virtualbox 4.x

#27 GoogleCodeExporter opened 9 years ago
1
F-prot scanning for av_multiscan.py

#26 GoogleCodeExporter closed 9 years ago
2
pescanner.py crashed when analyzing 30K samples

#25 GoogleCodeExporter closed 9 years ago
4
add option to malfind to ONLY use yara rules

#24 GoogleCodeExporter closed 9 years ago
1
pymon error

#23 GoogleCodeExporter closed 9 years ago
2
malfind's addr_space.vtop fails when used with -S (scan)

#22 GoogleCodeExporter closed 9 years ago
1
Add to apihooks whitelist

#21 GoogleCodeExporter closed 9 years ago
1
some kernel exceptions detected as apihooks

#20 GoogleCodeExporter closed 9 years ago
1
psxview references modscan2.PSScan2

#19 GoogleCodeExporter closed 9 years ago
1
Add OFFSET option back to malfind

#18 GoogleCodeExporter closed 9 years ago
1
LdrModules highlights all exe's as suspicious because they're not in the init order list

#17 GoogleCodeExporter closed 9 years ago
1
Combine OrphanThreads and SSDT_By_Threads plugins

#16 GoogleCodeExporter closed 9 years ago
2
orphanthreads doesn't detect suspicious thread marked by Tuluka

#15 GoogleCodeExporter closed 9 years ago
1
more than 2 SSDT tables cause ssdt_by_threads to fail

#14 GoogleCodeExporter closed 9 years ago
1
orphanthreads crashes when System process can't be found

#13 GoogleCodeExporter closed 9 years ago
1
MutantScanDB can't match mutants because of apostrophe in mutant name

#12 GoogleCodeExporter closed 9 years ago
1
New callback detections

#11 GoogleCodeExporter closed 9 years ago
1
Add MITRE's IDT hooking detection

#10 GoogleCodeExporter closed 9 years ago
1
Include PspCidTable output in csrpslist output

#9 GoogleCodeExporter closed 9 years ago
1
print disassembly of driverstartio with -v to driverirp

#8 GoogleCodeExporter closed 9 years ago
1
Problems with avsubmit.py

#7 GoogleCodeExporter closed 9 years ago
2
Additional callbacks for notifyroutines plugin

#6 GoogleCodeExporter closed 9 years ago
1
Add detection of inline KiSystemService hooks

#5 GoogleCodeExporter closed 9 years ago
1
problem with pendingdelete.pl

#4 GoogleCodeExporter closed 9 years ago
8
Detect DriverStartIO hooks

#3 GoogleCodeExporter closed 9 years ago
2
Bug in impscan when processing spyeye memory image

#2 GoogleCodeExporter closed 9 years ago
1
Bug in apihooks when processing rustock.b image

#1 GoogleCodeExporter closed 9 years ago
1