mandiant / unicorn-libemu-shim
Licence: other
libemu shim layer and win32 environment for Unicorn Engine
Stars: ✭ 67
Programming Languages
C++
36643 projects - #6 most used programming language
objective c
16641 projects - #2 most used programming language
c
50402 projects - #5 most used programming language
Labels
Projects that are alternatives of or similar to unicorn-libemu-shim
stringsifter
A machine learning tool that ranks strings based on their relevance for malware analysis.
Stars: ✭ 567 (+746.27%)
Mutual labels: fireeye-flare
flashmingo
Automatic analysis of SWF files based on some heuristics. Extensible via plugins.
Stars: ✭ 117 (+74.63%)
Mutual labels: fireeye-flare
Flare Floss
FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.
Stars: ✭ 2,020 (+2914.93%)
Mutual labels: fireeye-flare
Commando Vm
Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. [email protected]
Stars: ✭ 5,030 (+7407.46%)
Mutual labels: fireeye-flare
jitm
JITM is an automated tool to bypass the JIT Hooking protection on a .NET sample.
Stars: ✭ 27 (-59.7%)
Mutual labels: fireeye-flare
remote lookup
Resolves DLL API entrypoints for a process w/ remote query capabilities.
Stars: ✭ 51 (-23.88%)
Mutual labels: fireeye-flare
flare-dbg
flare-dbg is a project meant to aid malware reverse engineers in rapidly developing debugger scripts.
Stars: ✭ 146 (+117.91%)
Mutual labels: fireeye-flare
/* libemu / Unicorn compatibility shim layer Contributed by FireEye FLARE team Author: David Zimmer <[email protected]> <[email protected]> License: GPL Files: emu_cpu.h, emu_shim.h, emu_shim.cpp */ This is a sample of using the libemu win32 environment with Unicorn engine. Project also includes a shim layer so that you can easily port existing libemu code over to run on Unicorn. Please see the following article for more details: https://www.fireeye.com/blog/threat-research/2017/04/libemu-unicorn-compatability-layer.html Notes: --------------------------------------------------------------------------------- The libemu environment was taken from scdbg and includes support for 15 dlls. kernel32, ntdll, ws2_32, iphlpapi, user32, shell32, msvcrt, urlmon, wininet, shlwapi, advapi32, shdocvw, psapi, imagehlp, winhttp The sample.exe contains a hardcoded shellcode buffer. A compiled binary is available in the /bin folder. Project files were built with VS2008. If you compiler does not come with stdint.h and inttypes.h compatible versions can be found here: https://github.com/dzzie/VS_LIBEMU/tree/master/libemu/include Credits: --------------------------------------------------------------------------------- Libemu Copyright (C) Paul Baecher & Markus Koetter License: GPL Unicorn Copyright (C) Nguyen Anh Quynh and Dang Hoang Vu Site: http://www.unicorn-engine.org/ License: GPL QEMU Site: http://qemu.org License: GPL scdbg Copyright (C) David Zimmer Site: http://sandsprite.com License: GPL
Note that the project description data, including the texts, logos, images, and/or trademarks,
for each open source project belongs to its rightful owner.
If you wish to add or remove any projects, please contact us at [email protected].