Alberto Ortega
8e5f18a482
Add generic func to access regkey value and compare str, code refactor
2015-03-20 15:55:55 +01:00
Alberto Ortega
283f01a459
Update readme, remove dead link, the production build wont be signed from now
2015-03-20 14:58:12 +01:00
Alberto Ortega
02603a551c
Greatly reduce the icon size
2015-03-20 14:55:05 +01:00
Alberto Ortega
8dbe3511c5
Minor fix in linux Makefile
2015-03-20 14:54:49 +01:00
Alberto Ortega
cde905703a
Add new VirtualBox detection based on SystemBiosDate
2015-03-20 14:54:30 +01:00
Alberto Ortega
0e71cbd1b7
Make cppcheck happy, code style changes
2015-03-19 20:59:51 +01:00
Alberto Ortega
c381be5083
Add cpuid vendor detection
2015-03-19 18:34:23 +01:00
Alberto Ortega
7da8b35d13
Minor fix, minor function cleanup
2015-03-19 18:32:48 +01:00
Alberto Ortega
d03750ae28
Add cpu.c, fix rdtsc detection, add cpuid info, add cpuid hv bit detection
2015-03-19 08:28:19 +01:00
Alberto Ortega
e751fd1755
Minor change
2015-03-17 09:53:58 +01:00
Alberto Ortega
9aa3bac68a
Merge branch 'virtualminds-master' into dev-chaos
2015-03-17 09:49:37 +01:00
Alberto Ortega
ecbd42c151
Fix conflicts
2015-03-17 09:49:27 +01:00
Iñaki Rodriguez
d28c9a1fcd
- Added detection for sample.exe and malware.exe
2015-03-17 00:01:55 +01:00
Alberto Ortega
ae8dc5842c
Add generic sandbox / dbg detection using rdtsc instruction
2015-03-13 13:34:59 +01:00
Alberto Ortega
638a7cd84e
Merge branch 'born2c0de-master' into dev-chaos
2015-02-12 10:26:05 +01:00
Sanchit Karve
6e48059a56
Minor fix
...
Removed unnecessary variable declaration.
2015-02-12 00:37:14 -08:00
Sanchit Karve
084eb6726d
Bugfix: Restore Command Line Color Scheme
...
pafish modifies the command-line color scheme but does not restore
original color scheme after execution. Not cool. This commit fixes the
issue.
2015-02-12 00:30:04 -08:00
Alberto Ortega
9fb472d7da
v04 upload!
2015-01-01 18:27:39 +01:00
Alberto Ortega
9e0128cf73
Minor change in common.c (sizeof by one)
2015-01-01 17:49:32 +01:00
Alberto Ortega
591b998e9c
More housekeeping, minor changes in Makefiles
2015-01-01 17:39:32 +01:00
Alberto Ortega
6b8bcf189a
house-keeping
2015-01-01 17:17:06 +01:00
Alberto Ortega
abb13ad351
Adds GetTickCount() sleep patching detection
2015-01-01 13:08:47 +01:00
Alberto Ortega
417963345c
Minor bugfix
2014-12-31 20:28:11 +01:00
Alberto Ortega
02a6590271
Huge refactor, TRUE FALSE types added, utils functions added, fix encoding, trailing spaces, CRLF removed
2014-12-31 20:24:11 +01:00
Alberto Ortega
6912bb1565
Compilation fixes
2014-12-30 16:53:10 +01:00
Alberto Ortega
9816ed8eaa
Adding device detection #13 (Thorsten commit)
2014-12-29 01:20:21 +01:00
Alberto Ortega
30892b519c
Merge pull request #21 from Thorsten-Sick/GetDiskFreeSpace
...
Added GetDiskFreeSpace based disk space detection with the min size 60 G...
2014-12-29 00:44:46 +01:00
Thorsten Sick
f4dc13aec8
Added GetDiskFreeSpace based disk space detection with the min size 60 GB
2014-07-15 13:47:51 +02:00
Alberto Ortega
226200924d
Merge pull request #18 from nilp0inter/unattended_and_retval2
...
Unattended analysis and return value. (Fixed)
2014-05-02 15:35:50 +02:00
Roberto Abdelkader Martínez Pérez
a8be2e22bd
Restored binary file to previous verion. Let's the author compile it himself.
2014-05-02 13:44:57 +02:00
Roberto Abdelkader Martínez Pérez
78eff7982e
Merge branch 'unattended_and_retval' into unattended_and_retval2
2014-05-02 13:37:58 +02:00
Roberto Abdelkader Martínez Pérez
9a760b8765
Changed strcmp for strncmp.
2014-05-02 13:31:34 +02:00
Alberto Ortega
05859e7db5
Merge pull request #16 from Thorsten-Sick/vbox_tools
...
scanning for VirtualBox tools
2014-05-02 13:13:48 +02:00
Roberto Abdelkader Martínez Pérez
c54d7516fd
Added command line option -q that disables the last getchar() for unattended analysis.
...
Changed command return value to match the analysis result; with the following scheme:
- Everything `OK` -> 0
- Something `suspicious` but nothing `traced` -> 1
- Something `traced` -> 2
2014-05-01 19:47:45 +02:00
Thorsten Sick
9477202717
scanning for VirtualBox tools
2014-04-03 15:07:12 +02:00
Thorsten Sick
c4edcc791e
Adding device detection
2014-03-20 11:32:49 +01:00
Alberto Ortega
75299a4fc9
Merge pull request #12 from Thorsten-Sick/vbox_collection2
...
VBox tricks, code cleanup
2014-02-21 10:59:35 +01:00
Thorsten Sick
0bec600f71
Some code cleanup
2014-02-21 10:38:43 +01:00
Thorsten Sick
5fe5830875
Adding comments, some cleanup
2014-02-21 10:18:04 +01:00
Thorsten Sick
144e204c65
Removing Copy and Paste artifacts
2014-02-21 09:36:41 +01:00
Thorsten Sick
7dd7563aee
Checking services in registry
2014-02-20 15:45:23 +01:00
Thorsten Sick
79bf3e7430
Added two more registry keys: FADT and RSDT in Hardware/ACPI
2014-02-20 12:01:13 +01:00
Thorsten Sick
e15a37eb96
Looking for VirtualBox processes
2014-02-20 11:48:16 +01:00
Alberto Ortega
b040fcf4bd
Merge pull request #11 from Thorsten-Sick/vbox_collection
...
Vbox collection
2014-02-19 16:31:17 +01:00
Thorsten Sick
214bcadc4b
Adding Walied Assar credits
2014-02-18 09:37:08 +01:00
Thorsten Sick
b45a1334c6
network share detection
2014-02-17 15:57:12 +01:00
Thorsten Sick
925db8543e
Registry IDE device scanning
2014-02-17 14:58:14 +01:00
Thorsten Sick
6d80982d41
VirtualBox tray tool window detection
2014-02-17 11:53:40 +01:00
Thorsten Sick
69d2ffc190
VirtualBox pipe detection
2014-02-17 10:56:00 +01:00
Thorsten Sick
e2ea0340b6
ACPI key added
2014-02-17 10:15:24 +01:00
