HTDark | Underground Hacking Forum and Cybersecurity Community
  • Earn real money by being active: Hello Guest, earn real money by simply being active on the forum — post quality content, get reactions, and help the community. Once you reach the minimum credit amount, you’ll be able to withdraw your balance directly. Learn how it works.

Reverse Engineering MSI Dump v0.1a

Status
Not open for further replies.
itsMe

itsMe

*KillmeMories*
Staff member
Administrator
Super Moderator
Hacker
Specter
Crawler
Shadow
Joined
Jan 8, 2019
Messages
56,608
Solutions
2
Reputation
32
Reaction score
100,454
Points
2,313
Credits
32,600
‎6 Years of Service‎
 
76%
1.png


MSI Dump - a tool that analyzes malicious MSI installation packages, extracts files, streams, binary data and incorporates YARA scanner.

Features

This tool helps in quick triages as well as detailed examinations of malicious MSIs corpora. It lets us:

    Quickly determine whether file is suspicious or not.
    List all MSI tables as well as dump specific records
    Extract Binary data, all files from CABs, scripts from CustomActions
    scan all inner data and records with YARA rules
    Uses file/MIME type deduction to determine inner data type

To see this hidden content, you must like this content.
 
Status
Not open for further replies.
Back
Top