struppigel/portexanalyzerguiGraphical interface for PortEx, a Portable Executable and Malware Analysis Library
Graphical interface for PortEx, a Portable Executable and Malware Analysis Library
PortexAnalyzerGUI scans every file with your own signatures in addition to the signatures that come with PortEx.
Write them in the signature format of PortEx
and save them as .sig files in the folder signatures next to the program, e.g.:
[My packer]
pattern = 60 BE ?? ?? ?? ?? 8D BE
at = entrypoint
type = packer
.sig files of the folder are loaded, subfolders are not. Settings > Signatures opens the folder, creates it
if necessary, and chooses another folder..sig files are loaded again. Reload signatures in the Signatures view or in the
Settings menu loads them again and scans the open file with them.I test this program on Linux and Windows. But it should work on any OS with JRE version 17 or higher.
I will be including more and more features that PortEx already provides.
These features include among others:
Some of these features are already provided by PortexAnalyzer CLI version, which you can find here: PortexAnalyzer CLI
I develop PortEx and PortexAnalyzer as a hobby in my free time. If you like it, please consider buying me a coffee: https://ko-fi.com/struppigel
Karsten Hahn
Twitter: @Struppigel
Mastodon: [email protected]
Youtube: MalwareAnalysisForHedgehogs