Alberto Ortega
9aa3bac68a
Merge branch 'virtualminds-master' into dev-chaos
2015-03-17 09:49:37 +01:00
Alberto Ortega
ecbd42c151
Fix conflicts
2015-03-17 09:49:27 +01:00
Iñaki Rodriguez
d28c9a1fcd
- Added detection for sample.exe and malware.exe
2015-03-17 00:01:55 +01:00
Alberto Ortega
ae8dc5842c
Add generic sandbox / dbg detection using rdtsc instruction
2015-03-13 13:34:59 +01:00
Alberto Ortega
638a7cd84e
Merge branch 'born2c0de-master' into dev-chaos
2015-02-12 10:26:05 +01:00
Sanchit Karve
6e48059a56
Minor fix
...
Removed unnecessary variable declaration.
2015-02-12 00:37:14 -08:00
Sanchit Karve
084eb6726d
Bugfix: Restore Command Line Color Scheme
...
pafish modifies the command-line color scheme but does not restore
original color scheme after execution. Not cool. This commit fixes the
issue.
2015-02-12 00:30:04 -08:00
Alberto Ortega
9fb472d7da
v04 upload!
2015-01-01 18:27:39 +01:00
Alberto Ortega
9e0128cf73
Minor change in common.c (sizeof by one)
2015-01-01 17:49:32 +01:00
Alberto Ortega
591b998e9c
More housekeeping, minor changes in Makefiles
2015-01-01 17:39:32 +01:00
Alberto Ortega
6b8bcf189a
house-keeping
2015-01-01 17:17:06 +01:00
Alberto Ortega
abb13ad351
Adds GetTickCount() sleep patching detection
2015-01-01 13:08:47 +01:00
Alberto Ortega
417963345c
Minor bugfix
2014-12-31 20:28:11 +01:00
Alberto Ortega
02a6590271
Huge refactor, TRUE FALSE types added, utils functions added, fix encoding, trailing spaces, CRLF removed
2014-12-31 20:24:11 +01:00
Alberto Ortega
6912bb1565
Compilation fixes
2014-12-30 16:53:10 +01:00
Alberto Ortega
9816ed8eaa
Adding device detection #13 (Thorsten commit)
2014-12-29 01:20:21 +01:00
Alberto Ortega
30892b519c
Merge pull request #21 from Thorsten-Sick/GetDiskFreeSpace
...
Added GetDiskFreeSpace based disk space detection with the min size 60 G...
2014-12-29 00:44:46 +01:00
Thorsten Sick
f4dc13aec8
Added GetDiskFreeSpace based disk space detection with the min size 60 GB
2014-07-15 13:47:51 +02:00
Alberto Ortega
226200924d
Merge pull request #18 from nilp0inter/unattended_and_retval2
...
Unattended analysis and return value. (Fixed)
2014-05-02 15:35:50 +02:00
Roberto Abdelkader Martínez Pérez
a8be2e22bd
Restored binary file to previous verion. Let's the author compile it himself.
2014-05-02 13:44:57 +02:00
Roberto Abdelkader Martínez Pérez
78eff7982e
Merge branch 'unattended_and_retval' into unattended_and_retval2
2014-05-02 13:37:58 +02:00
Roberto Abdelkader Martínez Pérez
9a760b8765
Changed strcmp for strncmp.
2014-05-02 13:31:34 +02:00
Alberto Ortega
05859e7db5
Merge pull request #16 from Thorsten-Sick/vbox_tools
...
scanning for VirtualBox tools
2014-05-02 13:13:48 +02:00
Roberto Abdelkader Martínez Pérez
c54d7516fd
Added command line option -q that disables the last getchar() for unattended analysis.
...
Changed command return value to match the analysis result; with the following scheme:
- Everything `OK` -> 0
- Something `suspicious` but nothing `traced` -> 1
- Something `traced` -> 2
2014-05-01 19:47:45 +02:00
Thorsten Sick
9477202717
scanning for VirtualBox tools
2014-04-03 15:07:12 +02:00
Thorsten Sick
c4edcc791e
Adding device detection
2014-03-20 11:32:49 +01:00
Alberto Ortega
75299a4fc9
Merge pull request #12 from Thorsten-Sick/vbox_collection2
...
VBox tricks, code cleanup
2014-02-21 10:59:35 +01:00
Thorsten Sick
0bec600f71
Some code cleanup
2014-02-21 10:38:43 +01:00
Thorsten Sick
5fe5830875
Adding comments, some cleanup
2014-02-21 10:18:04 +01:00
Thorsten Sick
144e204c65
Removing Copy and Paste artifacts
2014-02-21 09:36:41 +01:00
Thorsten Sick
7dd7563aee
Checking services in registry
2014-02-20 15:45:23 +01:00
Thorsten Sick
79bf3e7430
Added two more registry keys: FADT and RSDT in Hardware/ACPI
2014-02-20 12:01:13 +01:00
Thorsten Sick
e15a37eb96
Looking for VirtualBox processes
2014-02-20 11:48:16 +01:00
Alberto Ortega
b040fcf4bd
Merge pull request #11 from Thorsten-Sick/vbox_collection
...
Vbox collection
2014-02-19 16:31:17 +01:00
Thorsten Sick
214bcadc4b
Adding Walied Assar credits
2014-02-18 09:37:08 +01:00
Thorsten Sick
b45a1334c6
network share detection
2014-02-17 15:57:12 +01:00
Thorsten Sick
925db8543e
Registry IDE device scanning
2014-02-17 14:58:14 +01:00
Thorsten Sick
6d80982d41
VirtualBox tray tool window detection
2014-02-17 11:53:40 +01:00
Thorsten Sick
69d2ffc190
VirtualBox pipe detection
2014-02-17 10:56:00 +01:00
Thorsten Sick
e2ea0340b6
ACPI key added
2014-02-17 10:15:24 +01:00
Thorsten Sick
2902f5f21f
Added pseudo-device vm detection
2014-02-17 09:56:19 +01:00
Thorsten Sick
7830b7a7d6
Added missing sysfile2 to header file
2014-02-17 09:45:31 +01:00
Alberto Ortega
2ced233a84
Merge pull request #10 from Thorsten-Sick/vbox_mac
...
Vbox mac
2014-02-14 18:46:28 +01:00
Thorsten Sick
f0e2ce07f9
Looking for NICs with VirtualBox Mac addresses
2014-02-14 15:07:54 +01:00
Thorsten Sick
083926cf24
libraries added to Makefile
2014-02-14 15:02:27 +01:00
Alberto Ortega
b639688a7b
Merge pull request #9 from Thorsten-Sick/multi_virtualbox_files_support
...
Multi virtualbox files support
2014-02-14 14:34:22 +01:00
Thorsten Sick
1f13f9bda4
Adding detection for system32 virtualbox dll and exe files
2014-02-13 16:47:07 +01:00
Thorsten Sick
af05de0f78
Supporting all drivers now
2014-02-13 16:33:29 +01:00
Alberto Ortega
33c836c913
Merge pull request #7 from Thorsten-Sick/linux_compile
...
lower case file name is essential for linux compilation
2014-02-13 15:59:55 +01:00
Thorsten Sick
34ada0bc8f
lower case file name is essential for linux compilation
2014-02-13 14:10:29 +01:00
