![]() Among the indicators, PeStudio shows when an image is compressed using UPX or MPRESS. By editing the XML file, one can customize the Indicators shown and their severity. The classifications are based on XML files provided with PeStudio. Indicators show the potential and the anomalies of the application being analyzed. ![]() Indicators are grouped into categories according to their severity. PeStudio shows Indicators as a human-friendly result of the analyzed image. PeStudio does not change the system or leaves anything behind. PeStudio runs on any Windows Platform and is fully portable, no installation is required. The tool is used by Computer Emergency Response Teams (CERT), Security Operations Centers (SOC) and Digital-Forensic Labs worldwide. The goal of PeStudio is to spot artifacts of executable files in order to ease and accelerate Malware Initial Assessment.
0 Comments
Leave a Reply. |