WinitorMalware Initial Assessment The goal of pestudio is to spot artifacts of executable files in order to ease and accelerate Malware Initial Assessment. The tool is used by Computer Emergency Response Teams (CERT), Security Operations Centers (SOC) and Digital-Forensic Labs worldwide. The development of the tool started in 2009 and is regularly updated. The following slides provide an overview of the
Full Disclosure: New tool: Hyperion - A runtime encrypter for 32-bit PE files
API Hooking tool injecting code in the PE: tool explanation and application examples.. – 133tsec
PEdump - dump your PE!
Extracting EXE Drop Malware
pev - the PE file analysis toolkit
SecurityXploded Forum • View topic - Released ExeScan by DouBle_Zer0
