vxsig
vxsig copied to clipboard
Automatically generate AV byte signatures from sets of similar binaries.
The Yara signatures look off, and don't correctly match the expected binaries when using static binaries, produced using Ida Free, BinExport, and processed via VxSig. Processing the following files outputs...
VxSig should be able to output: - just the signature to stdout (no messages or messages to stderr) - write signatures to file in the requested format Cutting and pasting...
``` bazel build -c opt //vxsig:vxsig Extracting Bazel installation... Starting local Bazel server and connecting to it... INFO: Repository com_google_binexport instantiated at: D:/test/vxsig/WORKSPACE:50:13: in Repository rule http_archive defined at: C:/users/user123456/_bazel_admin/4uuzjk7y/external/bazel_tools/tools/build_defs/repo/http.bzl:372:31:...
This should speed up the common subsequence operations a bit
Hi all, Thank you for your wonderful work. I am trying to use VxSig to generate AV signatures for a few malware families, where each family consists of multiple binaries...