Tuesday, 18 February 2020
On 22:32 by admin No comments
VirusTotal is very excited to announce a beta release of a new plugin for IDA Pro v7 which integrates VT Intelligence’s content search directly into IDA.
This plugin adds a new “VirusTotal” entry to the IDA Pro context menu (disassembly and strings windows), enabling you to search for similar or exact data on VirusTotal. It translates the user selection into a query that VTGrep understands.
This plugin adds a new “VirusTotal” entry to the IDA Pro context menu (disassembly and strings windows), enabling you to search for similar or exact data on VirusTotal. It translates the user selection into a query that VTGrep understands.
The current beta release provides the following search options:
- Search for bytes: it searches for the bytes contained in the selected area.
- Search for string: it searches for the same string as the one selected in the Strings Window.
- Search for similar code: identifies memory offsets or addresses in the currently selected area and ignores them when searching.
- Search for similar code (strict): same as above but it also ignores all the constants in the currently selected area.,
- Search for similar functions: same as “similar code” but you don’t need to select all the instructions that belong to a function. Just right-click on one instruction, and it will automatically detect the function boundaries, selecting all the instructions of the current function.
Source & Image : VirusTotal
Subscribe to:
Post Comments (Atom)
Search
Featured post
27 good hacker documentary
In the eyes of most people, a group of hackers usually extremely boring nothing interesting people, and that if only the computer code in ...

0 comments:
Post a comment