flare-vm icon indicating copy to clipboard operation
flare-vm copied to clipboard

How to check for the following file attributes?

Open flamecopper opened this issue 3 years ago • 0 comments

Hi there, What tools do I used to check for the following file attributes?

Is the file executable? -> peinfo Is the file binary? -> Ok For which architecture (x86 or x86-64) is the binary compiled? -> exeinfo Is the binary stripped of its symbol table? Can any useful strings be identified within the binary? -> strings Is there a running process associated with this binary? -> processexplorer, procmon What is the Secure Hash Algorithm (SHA) hash of the binary? -> exeinfo, peinfo Is the hash a known malicious file hash? -> exeinfo, peinfo What was the original programming language used? -> can be any Can any useful function names be identified? -> IDA, X64 DBG, X32 DBG

flamecopper avatar Mar 17 '22 08:03 flamecopper