Unpacking

Statically Analyze Code

TrID

Identify file type using signatures.

Website: https://mark0.net/soft-trid-e.html Author: Marco Pontello License: Free, unknown license Notes: trid, tridupdate State File: remnux.tools.trid

Bytehist

Generate byte-usage-histograms for all types of files with a focus PE files.

Website: https://www.cert.at/downloads/software/bytehist_en.html Author: Christian Wojner: https://twitter.com/Didelphodon License: ISC License: https://en.wikipedia.org/wiki/ISC_license Notes: bytehist State File: remnux.tools.bytehist

ClamAV

Scan files for malware signatures.

Website: https://www.clamav.net Author: https://www.clamav.net/about License: GNU General Public License (GPL): https://www.clamav.net/about Notes: clamscan, freshclam State File: remnux.packages.clamav-daemon

binwalk

Extract and analyze firmware images.

Website: https://github.com/ReFirmLabs/binwalk Author: Craig Heffner, ReFirmLabs License: IBM Public License, Common Public License, GNU General Public License (GPL) v2: https://www.sleuthkit.org/sleuthkit/licenses.php Notes: MIT License: https://github.com/ReFirmLabs/binwalk/blob/master/LICENSE State File: remnux.packages.binwalk

UPX

Pack and unpack PE files.

Website: https://upx.github.io Author: Markus Oberhumer, Laszlo Molnar License: GNU General Public License (GPL): https://github.com/upx/upx/blob/master/LICENSE Notes: upx State File: remnux.packages.upx-ucl