flare-vm
flare-vm copied to clipboard
How to check for the following file attributes?
Hi there, What tools do I used to check for the following file attributes?
Is the file executable? -> peinfo Is the file binary? -> Ok For which architecture (x86 or x86-64) is the binary compiled? -> exeinfo Is the binary stripped of its symbol table? Can any useful strings be identified within the binary? -> strings Is there a running process associated with this binary? -> processexplorer, procmon What is the Secure Hash Algorithm (SHA) hash of the binary? -> exeinfo, peinfo Is the hash a known malicious file hash? -> exeinfo, peinfo What was the original programming language used? -> can be any Can any useful function names be identified? -> IDA, X64 DBG, X32 DBG