Skip to content

Work Fast With the pattern matching swiss knife for malware researchers.

Notifications You must be signed in to change notification settings

CYJ/Yara_Mailware_Quick_menu_scanner

 
 

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

13 Commits
 
 
 
 

Repository files navigation

分支原因Windows7不吃這種新語法,原作者寫法支援Windows8以上 修正僅支援Windows7,不支援WinXP

原作者 https://github.com/techbliss/Yara_Mailware_Quick_menu_scanner

This is for adding the awsome Yara pattern scanner to windows right click menus.

What it Does

Right click a folder Scan folders and subfolder files recursive for

Crypto patterns
Hacking Team Mailware
Packers
Malicious documents

Right Click a File

Scan files for

Crypto patterns
Hacking Team Mailware
Packers
Malicious documents

Install

Since its really just alot of registry based commands, you have to have the files at,

C:\yara\yara32.exe
C:\yara\icons\
C:\yara\mailware\

I have added all rules to date, but if you wanna do it yourself, grap new yara rules from. https://github.com/Yara-Rules/rules

And if you want new binary prebuild(Use x86 one)I have 3.4.0 in this repo. https://github.com/plusvic/yara/releases/tag/v3.4.0

after you have extracted everything accoring to the folder i explained.

run

Add_Yara_Pattern_scanner_rmenu_To_right_click_file.reg

then

Add_Yara_Pattern_scanner_rmenu_To_right_click_folder.reg

Folder scan v7ssh

File scan ouezs

Result allqk

regards

About

Work Fast With the pattern matching swiss knife for malware researchers.

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published