首页
社区
课程
招聘
[转帖]PeStudio 6.70 by Marc Ochsenmeier
发表于: 2013-4-26 17:54 2623

[转帖]PeStudio 6.70 by Marc Ochsenmeier

2013-4-26 17:54
2623
PeStudio 6.70 by Marc Ochsenmeier
PeStudio is a free tool which can be used to perform static analysis of any Windows application and reveals not only Raw-data, but also Indicators of Trust. Executable files analyzed with PeStudio are never started. For this reason, you can analyze suspicious applications with PeStudio with no risk!

Depending on how it is started PeStudio has a Graphical User Interface (GUI) or a Character-Based User Interface (CUI), which is especially useful when performing batch-mode oriented parsing of executable files.

PeStudio has a set of unique features like looking-up for the image being analyzed on Virustotal, the possibility to start new instances of PeStudio with the dependencies of the image. PeStudio does a RAW access to the data of the Windows Portable Executable format. No Windows API is used to gather elements.

A feature which is also unique to PeStudio is the ability to create an XML report of the image being analyzed.

http://www.winitor.com/


[培训]内核驱动高级班,冲击BAT一流互联网大厂工作,每周日13:00-18:00直播授课

上传的附件:
收藏
免费 1
支持
分享
最新回复 (14)
雪    币: 6528
活跃值: (3438)
能力值: ( LV3,RANK:30 )
在线值:
发帖
回帖
粉丝
2
显示很多东西,但不能复制,不太方便
2013-4-26 18:01
0
雪    币: 97697
活跃值: (200849)
能力值: (RANK:10 )
在线值:
发帖
回帖
粉丝
3
PeStudio 6.91
上传的附件:
2013-6-15 00:07
0
雪    币: 97697
活跃值: (200849)
能力值: (RANK:10 )
在线值:
发帖
回帖
粉丝
4
PeStudio 7.04 by Marc Ochsenmeier
PeStudio is a free tool which can be used to perform static analysis of any Windows application and reveals not only Raw-data, but also Indicators of Trust. Executable files analyzed with PeStudio are never started. For this reason, you can analyze suspicious applications with PeStudio with no risk!
Depending on how it is started PeStudio has a Graphical User Interface (GUI) or a Character-Based User Interface (CUI), which is especially useful when performing batch-mode oriented parsing of executable files.
PeStudio has a set of unique features like looking-up for the image being analyzed on Virustotal, the possibility to start new instances of PeStudio with the dependencies of the image. PeStudio does a RAW access to the data of the Windows Portable Executable format. No Windows API is used to gather elements.
A feature which is also unique to PeStudio is the ability to create an XML report of the image being analyzed.

上传的附件:
2013-6-27 10:51
0
雪    币: 97697
活跃值: (200849)
能力值: (RANK:10 )
在线值:
发帖
回帖
粉丝
5
PeStudio Version 7.09
Version 7.09
. Enhanced detection of fake UPX
. Extented Blacklist of Functions
. Fixed a bug when handling exported functions
. Show Section:Offset Addresses where exports, imports and strings are located in

http://www.winitor.com/tools/PeStudio709.zip

上传的附件:
2013-7-6 23:15
0
雪    币: 97697
活跃值: (200849)
能力值: (RANK:10 )
在线值:
发帖
回帖
粉丝
6
PeStudio Version 7.11
Version 7.11
. Removed many strings from Parser and put these in a new PeStudioTranslations.XML file
. Corrected NB10 debug detection
Version 7.10
. Show Section:Offset for Resources
. Extended Types and location of embedded Executables
. More validity checks on Exports
. More detection of Masquerated UPX

http://www.winitor.com/tools/PeStudio711.zip

上传的附件:
2013-7-6 23:17
0
雪    币: 97697
活跃值: (200849)
能力值: (RANK:10 )
在线值:
发帖
回帖
粉丝
7
PeStudio Version 7.12
http://www.winitor.com/tools/PeStudio712.zip

上传的附件:
2013-7-6 23:18
0
雪    币: 9658
活跃值: (3523)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
8
这么多附件,下哪个好?
2013-7-7 14:50
0
雪    币: 97697
活跃值: (200849)
能力值: (RANK:10 )
在线值:
发帖
回帖
粉丝
9
PeStudio Version 7.12
2013-7-7 15:27
0
雪    币: 9658
活跃值: (3523)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
10
谢谢!运气不好,下来测试一个程序(36K,没加任何壳),结果全部挂掉,害得系统浏览器也崩溃了,看来那小强是这个软件的死敌(除702外各版均试过,全挂)
2013-7-7 16:27
0
雪    币: 97697
活跃值: (200849)
能力值: (RANK:10 )
在线值:
发帖
回帖
粉丝
11
PeStudio 7.15 by Marc Ochsenmeier
上传的附件:
2013-7-11 09:10
0
雪    币: 97697
活跃值: (200849)
能力值: (RANK:10 )
在线值:
发帖
回帖
粉丝
12
PeStudio 7.36
File: ChangeLog.txt
Author: Marc Ochsenmeier
Email info@winitor.com
Web: www.winitor.com

Version 7.36
. Added Support of images packed with FSG

Version 7.35
. Better imports detection
. Handled misalignement of Version buffer
. Better validation of certificat
. fixed a crash with files depending on a specific library.
. Handled an issue when loading the same image multiple times

上传的附件:
2013-8-14 06:29
0
雪    币: 97697
活跃值: (200849)
能力值: (RANK:10 )
在线值:
发帖
回帖
粉丝
13
PeStudio 7.72
上传的附件:
2013-12-24 10:53
0
雪    币: 97697
活跃值: (200849)
能力值: (RANK:10 )
在线值:
发帖
回帖
粉丝
14
PeStudio v8.06
What´s New in version 8.06:
Extended Features detection
Extended Blacklisting
Show default Icon of the Image being analysed (which often helps as first suspicious indicator)

Download
Portable
http://www.winitor.com/tools/PeStudio806.zip

2014-2-10 00:04
0
雪    币: 32
活跃值: (319)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
15
辛苦了,作者很勤快。
2014-3-9 05:11
0
游客
登录 | 注册 方可回帖
返回
//