├── .gitignore ├── Carve_Selected_Bytes.py ├── CreateYaraSignature.py ├── Create_Malware_Profile.py ├── Decode_Selected_Bytes_Carve.py ├── Decode_Selected_Bytes_Print.py ├── Find_Specific_Instruction.py ├── Frequency_Count_Selected_Bytes.py ├── Function_Hashes.py ├── Interesting_Api_Calls.py ├── Loops_to_Sig.py ├── README.md ├── Scan_For_Xored_Object_Streams.py ├── Selected_Bytes_to_Yara_Sig.py ├── Subs_to_Sig.py ├── Suspicious_Data_Objects.py ├── Suspicious_XOR_functions.py ├── XOR_Selected_Bytes_Carve.py └── XOR_Selected_Bytes_Print.py /.gitignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/madsc13ntist/IDAPython/HEAD/.gitignore -------------------------------------------------------------------------------- /Carve_Selected_Bytes.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/madsc13ntist/IDAPython/HEAD/Carve_Selected_Bytes.py -------------------------------------------------------------------------------- /CreateYaraSignature.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/madsc13ntist/IDAPython/HEAD/CreateYaraSignature.py -------------------------------------------------------------------------------- /Create_Malware_Profile.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/madsc13ntist/IDAPython/HEAD/Create_Malware_Profile.py -------------------------------------------------------------------------------- /Decode_Selected_Bytes_Carve.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/madsc13ntist/IDAPython/HEAD/Decode_Selected_Bytes_Carve.py -------------------------------------------------------------------------------- /Decode_Selected_Bytes_Print.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/madsc13ntist/IDAPython/HEAD/Decode_Selected_Bytes_Print.py -------------------------------------------------------------------------------- /Find_Specific_Instruction.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/madsc13ntist/IDAPython/HEAD/Find_Specific_Instruction.py -------------------------------------------------------------------------------- /Frequency_Count_Selected_Bytes.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/madsc13ntist/IDAPython/HEAD/Frequency_Count_Selected_Bytes.py -------------------------------------------------------------------------------- /Function_Hashes.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/madsc13ntist/IDAPython/HEAD/Function_Hashes.py -------------------------------------------------------------------------------- /Interesting_Api_Calls.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/madsc13ntist/IDAPython/HEAD/Interesting_Api_Calls.py -------------------------------------------------------------------------------- /Loops_to_Sig.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/madsc13ntist/IDAPython/HEAD/Loops_to_Sig.py -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/madsc13ntist/IDAPython/HEAD/README.md -------------------------------------------------------------------------------- /Scan_For_Xored_Object_Streams.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/madsc13ntist/IDAPython/HEAD/Scan_For_Xored_Object_Streams.py -------------------------------------------------------------------------------- /Selected_Bytes_to_Yara_Sig.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/madsc13ntist/IDAPython/HEAD/Selected_Bytes_to_Yara_Sig.py -------------------------------------------------------------------------------- /Subs_to_Sig.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/madsc13ntist/IDAPython/HEAD/Subs_to_Sig.py -------------------------------------------------------------------------------- /Suspicious_Data_Objects.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/madsc13ntist/IDAPython/HEAD/Suspicious_Data_Objects.py -------------------------------------------------------------------------------- /Suspicious_XOR_functions.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/madsc13ntist/IDAPython/HEAD/Suspicious_XOR_functions.py -------------------------------------------------------------------------------- /XOR_Selected_Bytes_Carve.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/madsc13ntist/IDAPython/HEAD/XOR_Selected_Bytes_Carve.py -------------------------------------------------------------------------------- /XOR_Selected_Bytes_Print.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/madsc13ntist/IDAPython/HEAD/XOR_Selected_Bytes_Print.py --------------------------------------------------------------------------------