Skip to content

RachidAZ/ELTE_Scanner

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

22 Commits
 
 
 
 
 
 
 
 

Repository files navigation

ELTE_Scanner tool

suspecious files detector tool , coded in C# VS2017. The analysis is based on:
-The IAT (Import Address Table ) , checking suspecious Win API functions.
-Packed PE file.
-Entire file entropy.
-Sections entropy.
-Malicious commands and strings.

dependencies:
-dotNET framework 4
-Yara 3.9.0

ELTEdete

ELTEdete_inProduction2