Home

pecarver.py => Given a dumped stream, scans for PE Executable presence, compute its size and dump the executable.

pyOLEScanner.py => Given an OLE2 file (DOC/XLS/PPT) looks for Shellcodes, Embedded Executables, API presence, Applies XOR Bruteforce, and finally states if the file is Malicious or Clean.

setup_test.py => Automatically determines the GCC flags to compile *.c generated by pyRex, usage: python setup_test.py build_ext --inplace