
astaroth-deobfuscator
IDA python script for deobfuscating Astaroth/Guildma injector DLL
binary-analysismalware-analysisreverse-engineering+1
8

IDA python script for deobfuscating Astaroth/Guildma injector DLL

Extracts and analyzes PE file security characteristics (ASLR, DEP, CFG, NO_SEH) from DLLs and EXEs across directories, storing results in a SQLite…

A tool for UEFI firmware reverse engineering